Create a new Sub CA provider
POST/v1/distributedissuers/subcaproviders
Creates a sub ca provider
Request
Responses
- 201
- 400
- 403
- 404
Sub CA Provider was created; details in response body;
The request was rejected. Possible causes, by error code:
- 10006: Malformed JSON body or an unknown/unrecognized field; or sharing
is requested outside a Strata context or with both
shareWithAllandsharedWithSubTsgIdsset. - 50301:
nameis empty. - 50302:
caAccountIdis missing. - 50303:
caProductOptionIdis missing. - 50304:
validityPeriodis empty or not a valid ISO-8601 period. - 50305:
commonNameis empty. - 50306:
keyAlgorithmis empty. - 50308:
caTypeis not a supported Sub CA type. - 50310:
caTypeis empty. - 50311: A Sub CA provider with the same
namealready exists. - 50312:
nameis longer than 64 characters. - 50313:
commonNameis longer than 64 characters. - 50314:
organizationis longer than 64 characters. - 50315:
organizationalUnitis longer than 64 characters. - 50316:
localityis longer than 64 characters. - 50317:
stateOrProvinceis longer than 64 characters. - 50318:
countryis longer than 64 characters. - 50319: When signing is enabled, the PKCS11 partition label is empty or longer than 32 characters, or the PIN is empty.
- 50320: A PKCS11 allowed client library is not a 64-character SHA-256 hash.
- 50321: The PKCS11 partition serial number is not up to 18 numeric/hex characters.
- 50322: A sub-TSG id is not a 10-digit number starting with 1.
The request was forbidden. Possible causes, by error code:
- 1002: The operation is restricted to the primary TSG; sub-TSG callers are rejected.
The referenced entity was not found. Possible causes, by error code:
- 50307: The referenced CA account does not exist (or belongs to another tenant).
- 50309: The referenced CA product option does not exist on that CA account.