- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
Endpoint Reference
The CertSecure Manager API endpoints are organized into the groups below. Each group page lists its endpoints and documents their parameters, example requests, and responses.
| Group | Description | Endpoints |
|---|---|---|
| Health | The Health endpoints confirm that the CertSecure Manager backend is reachable, report the installed version, validate an API token, and return health information for the connected PKI. | 4 |
| API Token Management | The API Token Management endpoints create, refresh, list, revoke, and delete the API tokens that are used to authenticate to the CertSecure Manager API. | 5 |
| CA Management | The CA Management endpoints list the certificate authorities (CAs) configured in CertSecure Manager, return the CAs the calling user can enroll from, and add, update, or remove CA configurations. | 6 |
| Templates | The Templates endpoints manage the template configuration (validity) that CertSecure Manager applies to the certificate templates of a CA. | 4 |
| Certificate Enrollment | The Certificate Enrollment endpoints issue certificates from a CSR or from subject details, generate CSRs, renew and revoke certificates (individually or in bulk), download certificates and PFX files, import third-party certificates and trusted roots, and manage enrollment policies and ownership. | 57 |
| Inventory | The Inventory endpoints return the certificate inventory of each CA together with the counts and distributions (status, expiry, key length, signing algorithm, template) that drive the CertSecure Manager dashboards. | 26 |
| Certificate Discovery | The Certificate Discovery endpoints manage scan configurations (network, cloud, and vault), start discovery scans, and return scan details, discovered certificates, analytics, and scan reports. | 21 |
| Tasks | The Tasks endpoints list and delete the background tasks created by certificate operations, and approve or deny certificate requests that are waiting for approval. | 4 |
| Watcher Groups | The Watcher Groups endpoints create and manage groups of users who receive notifications for a certificate, and assign those groups to certificates. | 9 |
| Alerts | The Alerts endpoints control who receives certificate alerts, resend certificate emails, and manage the Microsoft Teams notification configuration. | 5 |
| Reports | The Reports endpoints generate certificate, risk, key strength, algorithm, self-signed, and wildcard reports, and manage the risk rules used to score certificates. | 19 |
| Logs | The Logs endpoints return audit logs by date, month, range, severity, or type, control debug logging, and manage log forwarding to a SIEM (Splunk). | 16 |
| Monitoring | The Monitoring endpoints report the health of the CertSecure Manager backend and return CPU, memory, and disk metrics for the monitored hosts. | 6 |
| Scheduling | The Scheduling endpoints read and configure the scheduled weekly and monthly reports and alerts. | 2 |
| SMTP | The SMTP endpoints read and update the SMTP configuration used to send email notifications, and send a test email. | 3 |
| ACME | The ACME endpoints manage ACME profiles, external ACME directory URLs, and DNS domains used for ACME validation, and expose the CertSecure Manager ACMEv2 directory. | 15 |
| Azure Key Vault | The Azure Key Vault endpoints register Azure Key Vaults with CertSecure Manager, list and download the certificates they hold, and upload certificates issued by CertSecure Manager to a vault. | 10 |
| Google Cloud (GCP) | The GCP endpoints upload Google Cloud service account credentials, list projects and service accounts, and generate External Account Binding (EAB) credentials for Google Public CA. | 5 |
| HashiCorp Vault | The HashiCorp Vault endpoints configure a HashiCorp Vault PKI secrets engine as a CA, list its roles and certificates, issue certificates, and synchronize Vault certificates into CertSecure Manager. | 8 |
| EJBCA | The EJBCA endpoints configure the connection to an EJBCA instance, verify authentication, list its CAs, and issue certificates through EJBCA. | 6 |
| ServiceNow | The ServiceNow endpoints configure the ServiceNow instance used by CertSecure Manager, manage the ServiceNow users and groups that are linked to CertSecure Manager users, and transfer group ownership. | 11 |
Note: All endpoints except the public endpoints listed in Authorizing Requests require a bearer token, and each operation also requires the corresponding permission in CertSecure Manager. Requests without the required permission return 403 Forbidden.