SigningCertificate APIs

The SigningCertificate interface provides operations to view and manage vCenter signing certificates which are used to sign and verify tokens issued by vCenter token service. Versioning is the same as for the vcenter package. 1.23 - vSphere 7.0 U3

Operations

GET

Get Certificate Management Signing Certificate

Retrieve the signing certificate chains for validating vCenter-issued tokens. if you do not have all of the privileges described as follows: - Operation execution requires System.Read.

PUT

Set Certificate Management Signing Certificate

Set the active signing certificate for vCenter. The certificate will immediately be used to sign tokens issued by vCenter token service. if you do not have all of the privileges described as follows: - Operation execution requires CertificateManagement.Administer.

POST

Refresh Signing Certificate

Refresh the vCenter signing certificate chain. The new signing certificate will be issued in accordance with vCenter CA policy and set as the active signing certificate for the vCenter token service. The certificate will immediately be used to sign tokens issued by vCenter token service. If a third-party/custom certificate has been configured as the signing certificate for compliance reasons, refresh may take vCenter out of compliance. if you do not have all of the privileges described as follows: - Operation execution requires CertificateManagement.Administer.