- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
Getting Started
The CertSecure Manager API exposes the certificate lifecycle management capabilities of CertSecure Manager over HTTPS. Requests and responses use JSON unless an endpoint returns a file, such as a certificate, a PFX file, or a report.
What You Can Do with the API
- Enroll certificates from a CSR or from subject details, and renew, revoke, or download them.
- Query the certificate inventory of each CA and retrieve counts by status, expiry, key length, and template.
- Configure and run certificate discovery scans across networks, cloud providers, and vaults.
- Generate certificate, risk, and key strength reports.
- Manage CAs, templates, watcher groups, alerts, scheduled reports, and SIEM log forwarding.
- Integrate with ACME, Azure Key Vault, Google Cloud, HashiCorp Vault, EJBCA, and ServiceNow.
Base URL
All endpoints are served from the URL of your CertSecure Manager backend. The endpoint paths in this reference are relative to that URL:
https://<certsecure-backend-url>/<endpoint>
For example, the version endpoint of a backend is
https://<certsecure-backend-url>/version. The API is
available over HTTPS only.
Swagger API
Every CertSecure Manager backend publishes an interactive Swagger API page at
https://<certsecure-backend-url>/api/docs/. You can use it to
browse all endpoints, authorize with your token, and send test requests. The
same page can be opened from the CertSecure Manager portal, as described in
Header Bar > Swagger API.
The underlying API definition (Swagger 2.0) can be downloaded from
https://<certsecure-backend-url>/static/swagger.json and
imported into tools such as Postman.
API Version
The API version matches the CertSecure Manager release; this reference describes version 3.3. To check the version of your backend, call GET /version, which does not require authentication:
curl -X GET "https://<certsecure-backend-url>/version"{
"Backend": "3.3.1",
"Frontend": "3.3.1",
"mode": "saas"
}Before You Begin
- A CertSecure Manager user account with the permissions required for the operations you plan to call.
- An API token, generated as described in Authorizing Requests.
- Network access over HTTPS from the calling system to the CertSecure Manager backend.