---
title: "Creates an ephemeral certificate for the current API Session"
method: POST
path: "/current-api-session/certificates"
tags: ["Current API Session"]
---

# Creates an ephemeral certificate for the current API Session

`POST /current-api-session/certificates`

Creates an ephemeral certificate for the current API Session. This endpoint expects a PEM encoded CSRs to be provided for fulfillment as a property of a JSON payload. It is up to the client to manage the private key backing the CSR request.

## Request body

- CurrentApiSessionCertificateCreate
  - `csr` string, required

## Response `201`

A response of a create API Session certificate

- CreateCurrentApiSessionCertificateEnvelope
  - `data` CurrentApiSessionCertificateCreateResponse, required
    - `_links` object — A map of named links
    - `id` string
    - `cas` string
    - `certificate` string, required
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `400` — The supplied request contains invalid fields or could not be parsed (json and non-json bodies). The error's code, message, and cause fields can be inspected for further information
- `401` — The supplied session does not have the correct access rights to request this resource
- `429` — The resource requested is rate limited and the rate limit has been exceeded
- `503` — The request could not be completed due to the server being busy or in a temporarily bad state

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/revisions/25da9a73a095/schema)