Enroll
Extend Enrollment
Extend the life of a currently enrolled router's certificates
Allows a router to extend its certificates' expiration date by using its current and valid client certificate to submit a CSR. This CSR may be passed in using a new private key, thus allowing private key rotation or swapping.
After completion any new connections must be made with certificates returned from a 200 OK response. The previous client certificate is rendered invalid for use with the controller even if it has not expired.
This request must be made using the existing, valid, client certificate.
post/enroll/extend/router
Request body
Response
A response containing the edge routers new signed certificates (server chain, server cert, CAs).
Example response
{
"data": {
"serverCert": "serverCert",
"cert": "cert",
"ca": "ca"
},
"meta": {
"apiEnrollmentVersion": "apiEnrollmentVersion",
"apiVersion": "apiVersion",
"pagination": {
"offset": 6.027456183070403,
"limit": 0.8008281904610115,
"totalCount": 1.4658129805029452
},
"filterableFields": [
"filterableFields",
"filterableFields"
]
}
}