Product Documentation

The listDigitalCertificates operation webservice in the TR31 module retrieves and TR31_DIGITAL_CERTIFICATES java object(s) matching the webservice inputs and returns either the matching object or a list of matching objects in the response.


The listDigitalCertificates web service requires seven (7) parameters:

did

The unique encryption domain identifier.

svccred

The username (service credential) within the encryption domain with the authorization to call this web service. The credential requires the KMO and KMA privileges.

password

The password of the username to authenticate the credential of the requester.

environment

The environment in which this certificate is used. If none of the following values (certType, subjectDN, status) are specified, this webservice will return a list of all digital certificates created in this environment.

Accepted values:
DEVELOPMENT, QA, PRODUCTION, NON_PRODUCTION, OTHER

certType

The type of certificate to be generated by this module.

Accepted values:
PCR_TOKEN_AUTHENTICATION, KEK_TRANSPORT_AUTHENTICATION, KEK_TRANSPORT, TLS_CLIENT_AUTHENTICATION, OTHER

subjectDn

The full distinguished name (DN) of the end-entity (EE) certificate.

status

[Optional] Status of the digital certificates record. If this value is null, this webservice will not update the found TR31_DIGITAL_CERTIFICATES DB record's status column.

Accepted values:
REQUESTED, REJECTED, CURRENT, EXPIRED, REVOKED, OTHER