Skip to content
Identity and Access Management

Create an Operational Certificate

Operational Certificate is created by both POST/ PATCH application API. Refer to Create DMA for POST API.

PATCH API

PATCH {base URL}/devices/{deviceId}/applications/{applicationId}

Request Body

{
    "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIIBIjCB0AIBADANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V1+..\n-----END CERTIFICATE REQUEST-----"
}

####Fields required in CSR

ParameterData TypeDescription
common_name*stringname of the application

Success Response (200):

{
    "metadata": {
        "createdBy": "trn:2:iam:us:device:b2cbfd1f-af0c-42f5-9cdf-1029f9a3ee07",
        "createdAt": "2025-12-04T15:36:52.708000Z",
        "updatedBy": "trn:2:iam:us:device:b2cbfd1f-af0c-42f5-9cdf-1029f9a3ee07",
        "updatedAt": "2025-12-04T15:36:52.708000Z"
    },
    "id": "026a24df-8b88-4617-b68a-e58bc8468ff2",
    "applicationName": "application-3489",
    "description": "test Description",
    "certificate": "-----BEGIN CERTIFICATE----- MIIDXTCCAkWgAkiG9w0BAQsFAwIBAgIJALa6+2y+0zANBgkqhDBoMQswCQYDVQQG... -----END CERTIFICATE-----",
    "displayName": "test application",
    "subscriptionScopes": [
        "iam-test", "iot-test-app"
    ],
    "trn": "trn:2:iam:us:application:026a24df-8b88-4617-b68a-e58bc8468ff2"
}

For more details, refer to API documentation.

###OPEN SSL COMMANDS TO GENERATE CSR: For generating Private Key

openssl genrsa -out privatekey.pem 2048

For generating csr from Private Key

openssl req -new -key private.key -out request.csr