Endpoint
Authentication
Requires a Personal API Access Token.Header
Request
Headers
| Header | Value | Required |
|---|---|---|
| Authorization | Bearer {token} | Yes |
| Content-Type | multipart/form-data | Yes |
Path Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| projectName | string | Yes | Project name |
| certificateName | string | Yes | Certificate name (cannot be changed) |
Form Data
Same as Create Certificate. See Create Certificate for field descriptions.Query Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| jwkUpdateAction | string | No | Action to take on referenced JWKs: NULLIFY (clear references) or UPDATE (re-parse and update JWKs). Defaults to NULLIFY if not provided. |
| updateScope | string | No | Scope for updating JWKs: SAME_PROJECT or ALL_PROJECTS (used when jwkUpdateAction is UPDATE) |
Notes
- Certificate name in path must match existing certificate
- All form fields are required
- Old certificate is deleted and new one is created
- Certificate is automatically deployed after update
- If
jwkUpdateAction=UPDATE, JWKs created from this certificate will be re-parsed and updated - If
jwkUpdateAction=NULLIFYor not provided, JWK references will be cleared (default behavior) updateScopedetermines which JWKs to update whenjwkUpdateAction=UPDATE:SAME_PROJECTorALL_PROJECTS
Response
Same as Create Certificate. See Create Certificate for response format.cURL Example
Example 1: Update Certificate
Example 2: Update Certificate with JWK Updates
Example 3: Update Certificate and Clear JWK References
Notes and Warnings
-
Certificate Name:
- Cannot be changed (specified in path)
- Must match existing certificate
-
Replacement:
- Old certificate is deleted and new one is created
- This ensures clean update across all environments
-
All Fields Required:
- All form fields must be provided
- Same requirements as create
-
Referenced JWKs:
- If
jwkUpdateAction=UPDATE, JWKs created from this certificate will be re-parsed and updated - If
jwkUpdateAction=NULLIFYor not provided (default), JWK references will be cleared updateScopedetermines which JWKs to update whenjwkUpdateAction=UPDATE:SAME_PROJECTorALL_PROJECTS- Default behavior (
NULLIFY) ensures JWKs don’t reference deleted or updated certificates
- If
Permissions
User must haveSECRETS + MANAGE permission in the project. For deployment operations (when deploying certificates to environments), user must also have SECRETS + DEPLOY_UNDEPLOY permission.
Related Documentation
- Create Certificate - Create a new certificate
- Get Certificate - Get certificate details

