Skip to main content

Approve a CertOps trust anchor

POST 
/api/v1/workspaces/:id/certops/trust-anchors

Approves a CA certificate as a trust anchor that distribute-trust jobs may install into an agent's trust store (ADR-0012 decision 6). pem must contain exactly one CA certificate (Basic Constraints CA=true); bundles and leaf certificates are rejected. Re-submitting the same fingerprint updates the existing row in place and reactivates it if it was previously retired, rather than creating a duplicate record. Recorded as a CERTOPS_TRUST_ANCHOR_APPROVED audit event.

Request​

Responses​

Trust anchor approved (created or reactivated)