- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
EJBCA
The EJBCA endpoints configure the connection to an EJBCA instance, verify authentication, list its CAs, and issue certificates through EJBCA.
Endpoints
| Method | Endpoint | Description |
|---|---|---|
| POST | /ejbca/generate_certificate | Generate EJBCA certificate. |
| POST | /ejbca/generate_csr_and_enroll | EJBCA CSR + enroll. |
| GET | /ejbca/list_cas | List EJBCA CAs. |
| GET | /ejbca/setup_ejbca | Get EJBCA setup. |
| POST | /ejbca/setup_ejbca | Configure EJBCA. |
| GET | /ejbca/verify_ejbca_auth | Verify EJBCA auth. |
POST /ejbca/generate_certificate
Issues a certificate through EJBCA for an end entity.
Request Body (application/json)
| Field | Type | Required | Description |
|---|---|---|---|
ca_name |
string | Yes | Name of the certificate authority (CA) as configured in CertSecure Manager. |
certificate_profile |
string | Yes | - |
end_entity_profile |
string | Yes | - |
key_alg |
string | No | - |
key_spec |
string | No | - |
password |
string | Yes | - |
token_type |
string | No | - |
username |
string | Yes | - |
Example Request
curl -X POST "https://<certsecure-backend-url>/ejbca/generate_certificate" \
-H "Authorization: Bearer <token>" \
-H "Content-Type: application/json" \
-d '{"ca_name": "string", "certificate_profile": "string", "end_entity_profile": "string", "password": "string", "username": "string"}'Responses
| Status Code | Description |
|---|---|
| 200 | Issued. |
POST /ejbca/generate_csr_and_enroll
Generates a CSR from the subject details provided and enrolls it through EJBCA.
Request Body (application/json)
| Field | Type | Required | Description |
|---|---|---|---|
ca_host |
string | No | - |
ca_name |
string | Yes | Name of the certificate authority (CA) as configured in CertSecure Manager. |
cert_profile |
string | Yes | - |
commonName |
string | Yes | - |
countryName |
string | Yes | - |
dnsName |
string | Yes | - |
ee_profile |
string | Yes | - |
organizationName |
string | Yes | - |
password |
string | No | - |
response_format |
string | No | - |
user_name |
string | Yes | - |
Example Request
curl -X POST "https://<certsecure-backend-url>/ejbca/generate_csr_and_enroll" \
-H "Authorization: Bearer <token>" \
-H "Content-Type: application/json" \
-d '{"ca_name": "string", "cert_profile": "string", "commonName": "string", "countryName": "string", "dnsName": "string", "ee_profile": "string", "organizationName": "string", "user_name": "string"}'Responses
| Status Code | Description |
|---|---|
| 200 | Issued. |
GET /ejbca/list_cas
Lists the CAs of the configured EJBCA instance.
Example Request
curl -X GET "https://<certsecure-backend-url>/ejbca/list_cas" \
-H "Authorization: Bearer <token>"Responses
| Status Code | Description |
|---|---|
| 200 | CAs. |
GET /ejbca/setup_ejbca
Returns the EJBCA connection configuration.
Example Request
curl -X GET "https://<certsecure-backend-url>/ejbca/setup_ejbca" \
-H "Authorization: Bearer <token>"Example Response
{
"status": "success",
"message": "EJBCA configuration found",
"data": {
"base_url": "https://ejbca.example.com",
"active": true,
"created_at": "Tue, 24 Feb 2026 23:04:54 GMT",
"last_updated": "Tue, 24 Feb 2026 23:04:54 GMT"
}
}Responses
| Status Code | Description |
|---|---|
| 200 | Setup. |
POST /ejbca/setup_ejbca
Configures the connection to an EJBCA instance.
Request Body (application/json)
| Field | Type | Required | Description |
|---|---|---|---|
base_url |
string | Yes | - |
Example Request
curl -X POST "https://<certsecure-backend-url>/ejbca/setup_ejbca" \
-H "Authorization: Bearer <token>" \
-H "Content-Type: application/json" \
-d '{"base_url": "string"}'Responses
| Status Code | Description |
|---|---|
| 200 | The settings were saved. |
GET /ejbca/verify_ejbca_auth
Verifies that CertSecure Manager can authenticate to EJBCA.
Example Request
curl -X GET "https://<certsecure-backend-url>/ejbca/verify_ejbca_auth" \
-H "Authorization: Bearer <token>"Responses
| Status Code | Description |
|---|---|
| 200 | The request succeeded. |
| 401 | Auth failed. |