Export Certificates and Keys

To export certificates and keys, specify query parameters

certificate-name

,

format

, and

passphrase

:

						
https://<firewall>/api/?key=apikey&type=export&category=<certificate>
							&certificate-name=<certificate_name>
							&passphrase=<passphrase>
							&format=<pkcs12><pem><pkcs10>
							&include-key=<yes><no>&vsys=<vsys>
							<omit this parameter to import it into a shared location>
					

certificate-name
—name of the certificate object on the firewall
passphrase
—required when including the certificate key
format
—certificate format:
pkcs12
,
pem
, or
pkcs10
include-key
—yes or no parameter to include or exclude the key
vsys
—virtual system where the certificate object is used. Ignore this parameter if the certificate is a shared object.

You can use the example above to export a certificate signing request (CSR). If you do so, then specify the following two parameters as shown:

format
—
pkcs10
include-key
—
no

Confirm that the XML response includes the certificate:

						
-----BEGIN CERTIFICATE-----
							MIIDXTCCAkWgAwIBAgIJAJC1HiIAZAiIMA0GCSqGSIb3Df
							BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVx
							aWRnaXRzIFB0eSBMdGQwHhcNMTExMjMxMDg1OTQ0WhcNMT
							<!-- TRUNCATED -->
							-----END CERTIFICATE-----