Create a new Workload Issuance policy

POST 
/v1/distributedissuers/policies

Add a new a Workload Issuance Policy for an Issuer to use to ensure compliance with company restrictions for creating certificates.

Request

Responses

201

Workload Issuance policy was created; details in response body.

400

The request was rejected. Possible causes, by error code:

• 10006: Malformed JSON body or an unknown/unrecognized field; a keyUsages value is unsupported; a keyAlgorithm allowed or default value is unsupported; or sharing is requested outside a Strata context or with both shareWithAll and sharedWithSubTsgIds set.
• 50100: name is empty.
• 50101: validityPeriod is empty or not a valid ISO-8601 period.
• 50102: subject is omitted from the body.
• 50103: sans is omitted from the body.
• 50104: keyUsages list is empty.
• 50105: extendedKeyUsages list is empty.
• 50106: keyAlgorithm is omitted.
• 50107: keyAlgorithm.allowedValues list is empty.
• 50108: keyAlgorithm.defaultValue is empty.
• 50111: A policy with the same name already exists.
• 50112: Invalid subject common name.
• 50113: Invalid subject organization.
• 50114: Invalid subject organizational unit.
• 50115: Invalid subject locality.
• 50116: Invalid subject state or province.
• 50117: Invalid subject country.
• 50118: Invalid SAN DNS name.
• 50119: Invalid SAN IP address.
• 50120: Invalid SAN RFC822/email name.
• 50121: Invalid SAN URI.
• 50122: name is longer than 64 characters.
• 50123: extendedKeyUsages contains a value unsupported by Workload Identity Manager.
• 50124: A sub-TSG id is not a 10-digit number starting with 1.

403

The request was forbidden. Possible causes, by error code:

• 1002: The operation is restricted to the primary TSG; sub-TSG callers are rejected.