Create Company Certificate

Create a company trusted or untrusted certificate

Create a company trusted or untrusted certificate. Different from V1 in that we reject expired certificates.

post

Header parameters

sessionTokenstringRequired

Session authentication token.

Body

application/json

pemstringOptional

An X509 certificate in PEM format

Example: -----BEGIN CERTIFICATE-----MIIH/TC...p9DBiB/-----END CERTIFICATE-----

Responses

200

Success

application/json

400

Client error, see response body for further details.

application/json

401

Unauthorized: Invalid session token.

application/json

403

Forbidden: Caller lacks necessary entitlement.

application/json

500

Server error, see response body for further details.

application/json

post

/v2/companycert/create

HTTPcURLJavaScriptPython

POST /pod/v2/companycert/create HTTP/1.1
Host: yourpodURL.symphony.com
sessionToken: text
Content-Type: application/json
Accept: */*
Content-Length: 167

{
  "pem": "-----BEGIN CERTIFICATE-----MIIH/TC...p9DBiB/-----END CERTIFICATE-----",
  "attributes": {
    "name": "agentservice",
    "type": {
      "type": "USER"
    },
    "status": {
      "type": "TRUSTED"
    }
  }
}

{
  "companyCertAttributes": {
    "name": "agentservice",
    "type": {
      "type": "USER"
    },
    "status": {
      "type": "TRUSTED"
    }
  },
  "companyCertInfo": {
    "fingerPrint": "300a...",
    "issuerFingerPrint": "450s...",
    "lastSeen": 0,
    "updatedAt": 0,
    "updatedBy": 0,
    "commonName": "agentservice",
    "expiryDate": 1781886755000
  },
  "certInfo": [
    {
      "name": "Validity",
      "attributes": [
        {
          "name": "Not Before",
          "value": "Mon Jan 15 20:56:05 UTC 2018"
        },
        {
          "name": "Not After",
          "value": "Thu Jan 15 20:56:05 UTC 2026"
        }
      ]
    },
    {
      "name": "Public Key",
      "attributes": [
        {
          "name": "Algorithm",
          "value": "RSA"
        },
        {
          "name": "Format",
          "value": "X.509"
        }
      ]
    }
  ]
}

📘 Note

This v2 endpoint rejects expired certificates. When creating company certificates, make sure that you are calling the v2 version of this endpoint, and not v1.

🚧 Roles and privileges

Calling this endpoint requires the USER_PROVISIONING or the SUPER_ADMINISTRATOR role. See Bot Permissions for a list of roles and associated privileges.