Skip to main content

Reconcile an interrupted AD CS enrollment

POST 
/api/v1/workspaces/:id/certops/enrollments/:enrollmentId/recover

Human session and certops.issuer.manage are required. The exact current enrollment-bound real agent job must be orphaned_unknown_effect and still need operator reconciliation. Explicit acknowledgement and a bounded reason authorize only a continuation of the frozen enrollment, never a fresh key or automatic resubmission of an uncertain request. Installed, cancelled, expired, denied and other terminal enrollments cannot be revived; install_failed uses retry-installation instead. Concurrent calls reuse the active recovery. Workspace pause refuses with CERTOPS_WORKSPACE_PAUSED (400); approval policy applies. The original job keeps its historical unknown-effect flag. CSRF is required.

Request​

Responses​

Existing active recovery returned with jobId and created false