Update a Sub CA provider's details
PATCH/v1/distributedissuers/subcaproviders/:id
Updates (replaces) details of the subordinate CA provider that has the specified id. Only fields specified in the request will be updated.
Request
Responses
- 200
- 400
- 403
- 404
Sub CA provider updated; details in response body.
The request was rejected. Supplied fields are validated with the same rules as on create. Possible causes, by error code:
- 10006: Malformed JSON body or an unknown/unrecognized field; or sharing
is requested outside a Strata context or with both
shareWithAllandsharedWithSubTsgIdsset. - 10055: The
idpath parameter is not a valid UUID. - 50301:
nameis empty. - 50304:
validityPeriodis not a valid ISO-8601 period. - 50305:
commonNameis empty. - 50311: A different Sub CA provider with the same
namealready exists. - 50312:
nameis longer than 64 characters. - 50313:
commonNameis longer than 64 characters. - 50314:
organizationis longer than 64 characters. - 50315:
organizationalUnitis longer than 64 characters. - 50316:
localityis longer than 64 characters. - 50317:
stateOrProvinceis longer than 64 characters. - 50318:
countryis longer than 64 characters. - 50319: When signing is enabled, the PKCS11 partition label is empty or longer than 32 characters, or the PIN is empty.
- 50320: A PKCS11 allowed client library is not a 64-character SHA-256 hash.
- 50321: The PKCS11 partition serial number is not up to 18 numeric/hex characters.
- 50322: A sub-TSG id is not a 10-digit number starting with 1.
- 50247: HSM signing cannot be enabled because the Sub CA provider is referenced by one or more forward-trust proxy configurations.
The request was forbidden. Possible causes, by error code:
- 1002: The operation is restricted to the primary TSG; sub-TSG callers are rejected.
The referenced entity was not found. Possible causes, by error code:
- 10051: No Sub CA provider with the given
idexists in this tenant. - 50307: When
caProductOptionIdis changed, the referenced CA account does not exist (or belongs to another tenant). - 50309: When
caProductOptionIdis changed, the referenced CA product option does not exist on that CA account.