Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Hsdp Provider
  3. API Docs
  4. PkiCert
hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
philips-software/terraform-provider-hsdp

hsdp.PkiCert

Explore with Pulumi AI

hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
philips-software/terraform-provider-hsdp

Create and manage HSDP PKI leaf certificates

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as hsdp from "@pulumi/hsdp";

const cert = new hsdp.PkiCert("cert", {
    tenantId: hsdp_pki_tenant.tenant.id,
    role: "ec384",
    commonName: "myapp.com",
    altNames: "myapp.io,www.myapp.io",
    ipSans: [],
    uriSans: [],
    otherSans: [],
    ttl: "720h",
    excludeCnFromSans: false,
});
Copy
import pulumi
import pulumi_hsdp as hsdp

cert = hsdp.PkiCert("cert",
    tenant_id=hsdp_pki_tenant["tenant"]["id"],
    role="ec384",
    common_name="myapp.com",
    alt_names="myapp.io,www.myapp.io",
    ip_sans=[],
    uri_sans=[],
    other_sans=[],
    ttl="720h",
    exclude_cn_from_sans=False)
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/hsdp/hsdp"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := hsdp.NewPkiCert(ctx, "cert", &hsdp.PkiCertArgs{
			TenantId:          pulumi.Any(hsdp_pki_tenant.Tenant.Id),
			Role:              pulumi.String("ec384"),
			CommonName:        pulumi.String("myapp.com"),
			AltNames:          pulumi.String("myapp.io,www.myapp.io"),
			IpSans:            pulumi.StringArray{},
			UriSans:           pulumi.StringArray{},
			OtherSans:         pulumi.StringArray{},
			Ttl:               pulumi.String("720h"),
			ExcludeCnFromSans: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Hsdp = Pulumi.Hsdp;

return await Deployment.RunAsync(() => 
{
    var cert = new Hsdp.PkiCert("cert", new()
    {
        TenantId = hsdp_pki_tenant.Tenant.Id,
        Role = "ec384",
        CommonName = "myapp.com",
        AltNames = "myapp.io,www.myapp.io",
        IpSans = new[] {},
        UriSans = new[] {},
        OtherSans = new[] {},
        Ttl = "720h",
        ExcludeCnFromSans = false,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.hsdp.PkiCert;
import com.pulumi.hsdp.PkiCertArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var cert = new PkiCert("cert", PkiCertArgs.builder()
            .tenantId(hsdp_pki_tenant.tenant().id())
            .role("ec384")
            .commonName("myapp.com")
            .altNames("myapp.io,www.myapp.io")
            .ipSans()
            .uriSans()
            .otherSans()
            .ttl("720h")
            .excludeCnFromSans(false)
            .build());

    }
}
Copy
resources:
  cert:
    type: hsdp:PkiCert
    properties:
      tenantId: ${hsdp_pki_tenant.tenant.id}
      role: ec384
      commonName: myapp.com
      altNames: myapp.io,www.myapp.io
      ipSans: []
      uriSans: []
      otherSans: []
      ttl: 720h
      excludeCnFromSans: false
Copy

The next example will refresh the certificate every quarter. You’ll need to run the apply step occasionally

import * as pulumi from "@pulumi/pulumi";
import * as hsdp from "@pulumi/hsdp";

const pki = hsdp.getConfig({
    service: "pki",
});
const autoRefreshCert = new hsdp.PkiCert("autoRefreshCert", {
    triggers: {
        refresh: pki.then(pki => pki.slidingExpiresOn),
    },
    tenantId: hsdp_pki_tenant.tenant.id,
    role: "ec384",
    commonName: "myapp.com",
    altNames: "myapp.io,www.myapp.io",
    ipSans: [],
    uriSans: [],
    otherSans: [],
    ttl: "720h",
    excludeCnFromSans: false,
});
Copy
import pulumi
import pulumi_hsdp as hsdp

pki = hsdp.get_config(service="pki")
auto_refresh_cert = hsdp.PkiCert("autoRefreshCert",
    triggers={
        "refresh": pki.sliding_expires_on,
    },
    tenant_id=hsdp_pki_tenant["tenant"]["id"],
    role="ec384",
    common_name="myapp.com",
    alt_names="myapp.io,www.myapp.io",
    ip_sans=[],
    uri_sans=[],
    other_sans=[],
    ttl="720h",
    exclude_cn_from_sans=False)
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/hsdp/hsdp"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		pki, err := hsdp.GetConfig(ctx, &hsdp.GetConfigArgs{
			Service: "pki",
		}, nil)
		if err != nil {
			return err
		}
		_, err = hsdp.NewPkiCert(ctx, "autoRefreshCert", &hsdp.PkiCertArgs{
			Triggers: pulumi.StringMap{
				"refresh": pulumi.String(pki.SlidingExpiresOn),
			},
			TenantId:          pulumi.Any(hsdp_pki_tenant.Tenant.Id),
			Role:              pulumi.String("ec384"),
			CommonName:        pulumi.String("myapp.com"),
			AltNames:          pulumi.String("myapp.io,www.myapp.io"),
			IpSans:            pulumi.StringArray{},
			UriSans:           pulumi.StringArray{},
			OtherSans:         pulumi.StringArray{},
			Ttl:               pulumi.String("720h"),
			ExcludeCnFromSans: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Hsdp = Pulumi.Hsdp;

return await Deployment.RunAsync(() => 
{
    var pki = Hsdp.GetConfig.Invoke(new()
    {
        Service = "pki",
    });

    var autoRefreshCert = new Hsdp.PkiCert("autoRefreshCert", new()
    {
        Triggers = 
        {
            { "refresh", pki.Apply(getConfigResult => getConfigResult.SlidingExpiresOn) },
        },
        TenantId = hsdp_pki_tenant.Tenant.Id,
        Role = "ec384",
        CommonName = "myapp.com",
        AltNames = "myapp.io,www.myapp.io",
        IpSans = new[] {},
        UriSans = new[] {},
        OtherSans = new[] {},
        Ttl = "720h",
        ExcludeCnFromSans = false,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.hsdp.HsdpFunctions;
import com.pulumi.hsdp.inputs.GetConfigArgs;
import com.pulumi.hsdp.PkiCert;
import com.pulumi.hsdp.PkiCertArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var pki = HsdpFunctions.getConfig(GetConfigArgs.builder()
            .service("pki")
            .build());

        var autoRefreshCert = new PkiCert("autoRefreshCert", PkiCertArgs.builder()
            .triggers(Map.of("refresh", pki.applyValue(getConfigResult -> getConfigResult.slidingExpiresOn())))
            .tenantId(hsdp_pki_tenant.tenant().id())
            .role("ec384")
            .commonName("myapp.com")
            .altNames("myapp.io,www.myapp.io")
            .ipSans()
            .uriSans()
            .otherSans()
            .ttl("720h")
            .excludeCnFromSans(false)
            .build());

    }
}
Copy
resources:
  autoRefreshCert:
    type: hsdp:PkiCert
    properties:
      triggers:
        refresh: ${pki.slidingExpiresOn}
      tenantId: ${hsdp_pki_tenant.tenant.id}
      role: ec384
      commonName: myapp.com
      altNames: myapp.io,www.myapp.io
      ipSans: []
      uriSans: []
      otherSans: []
      ttl: 720h
      excludeCnFromSans: false
variables:
  pki:
    fn::invoke:
      function: hsdp:getConfig
      arguments:
        service: pki
Copy

Create PkiCert Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PkiCert(name: string, args: PkiCertArgs, opts?: CustomResourceOptions);
@overload
def PkiCert(resource_name: str,
            args: PkiCertArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def PkiCert(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            common_name: Optional[str] = None,
            role: Optional[str] = None,
            tenant_id: Optional[str] = None,
            alt_name: Optional[str] = None,
            alt_names: Optional[str] = None,
            exclude_cn_from_sans: Optional[bool] = None,
            ip_sans: Optional[Sequence[str]] = None,
            other_sans: Optional[Sequence[str]] = None,
            pki_cert_id: Optional[str] = None,
            triggers: Optional[Mapping[str, str]] = None,
            ttl: Optional[str] = None,
            uri_sans: Optional[Sequence[str]] = None)
func NewPkiCert(ctx *Context, name string, args PkiCertArgs, opts ...ResourceOption) (*PkiCert, error)
public PkiCert(string name, PkiCertArgs args, CustomResourceOptions? opts = null)
public PkiCert(String name, PkiCertArgs args)
public PkiCert(String name, PkiCertArgs args, CustomResourceOptions options)

type: hsdp:PkiCert
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PkiCertArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PkiCertArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PkiCertArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PkiCertArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PkiCertArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var pkiCertResource = new Hsdp.PkiCert("pkiCertResource", new()
{
    CommonName = "string",
    Role = "string",
    TenantId = "string",
    AltNames = "string",
    ExcludeCnFromSans = false,
    IpSans = new[]
    {
        "string",
    },
    OtherSans = new[]
    {
        "string",
    },
    PkiCertId = "string",
    Triggers = 
    {
        { "string", "string" },
    },
    Ttl = "string",
    UriSans = new[]
    {
        "string",
    },
});
Copy
example, err := hsdp.NewPkiCert(ctx, "pkiCertResource", &hsdp.PkiCertArgs{
CommonName: pulumi.String("string"),
Role: pulumi.String("string"),
TenantId: pulumi.String("string"),
AltNames: pulumi.String("string"),
ExcludeCnFromSans: pulumi.Bool(false),
IpSans: pulumi.StringArray{
pulumi.String("string"),
},
OtherSans: pulumi.StringArray{
pulumi.String("string"),
},
PkiCertId: pulumi.String("string"),
Triggers: pulumi.StringMap{
"string": pulumi.String("string"),
},
Ttl: pulumi.String("string"),
UriSans: pulumi.StringArray{
pulumi.String("string"),
},
})
Copy
var pkiCertResource = new PkiCert("pkiCertResource", PkiCertArgs.builder()
    .commonName("string")
    .role("string")
    .tenantId("string")
    .altNames("string")
    .excludeCnFromSans(false)
    .ipSans("string")
    .otherSans("string")
    .pkiCertId("string")
    .triggers(Map.of("string", "string"))
    .ttl("string")
    .uriSans("string")
    .build());
Copy
pki_cert_resource = hsdp.PkiCert("pkiCertResource",
    common_name="string",
    role="string",
    tenant_id="string",
    alt_names="string",
    exclude_cn_from_sans=False,
    ip_sans=["string"],
    other_sans=["string"],
    pki_cert_id="string",
    triggers={
        "string": "string",
    },
    ttl="string",
    uri_sans=["string"])
Copy
const pkiCertResource = new hsdp.PkiCert("pkiCertResource", {
    commonName: "string",
    role: "string",
    tenantId: "string",
    altNames: "string",
    excludeCnFromSans: false,
    ipSans: ["string"],
    otherSans: ["string"],
    pkiCertId: "string",
    triggers: {
        string: "string",
    },
    ttl: "string",
    uriSans: ["string"],
});
Copy
type: hsdp:PkiCert
properties:
    altNames: string
    commonName: string
    excludeCnFromSans: false
    ipSans:
        - string
    otherSans:
        - string
    pkiCertId: string
    role: string
    tenantId: string
    triggers:
        string: string
    ttl: string
    uriSans:
        - string
Copy

PkiCert Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PkiCert resource accepts the following input properties:

CommonName This property is required. string
The common name to use
Role This property is required. string
the Role to use as defined under a PKI Tenant resource
TenantId This property is required. string
The tenant ID to create this certificate under
AltName string

Deprecated: Deprecated

AltNames string
Alternative names to use, comma separated list.
ExcludeCnFromSans bool
Exclude common name from SAN
IpSans List<string>
) A list of IP SANS to include
OtherSans List<string>
) A list of other SANS to include
PkiCertId string
Triggers Dictionary<string, string>
) An list of strings which when changes will trigger recreation of the resource
Ttl string
The TTL, example 720h for 1 month
UriSans List<string>
) A list of URI SANS to include
CommonName This property is required. string
The common name to use
Role This property is required. string
the Role to use as defined under a PKI Tenant resource
TenantId This property is required. string
The tenant ID to create this certificate under
AltName string

Deprecated: Deprecated

AltNames string
Alternative names to use, comma separated list.
ExcludeCnFromSans bool
Exclude common name from SAN
IpSans []string
) A list of IP SANS to include
OtherSans []string
) A list of other SANS to include
PkiCertId string
Triggers map[string]string
) An list of strings which when changes will trigger recreation of the resource
Ttl string
The TTL, example 720h for 1 month
UriSans []string
) A list of URI SANS to include
commonName This property is required. String
The common name to use
role This property is required. String
the Role to use as defined under a PKI Tenant resource
tenantId This property is required. String
The tenant ID to create this certificate under
altName String

Deprecated: Deprecated

altNames String
Alternative names to use, comma separated list.
excludeCnFromSans Boolean
Exclude common name from SAN
ipSans List<String>
) A list of IP SANS to include
otherSans List<String>
) A list of other SANS to include
pkiCertId String
triggers Map<String,String>
) An list of strings which when changes will trigger recreation of the resource
ttl String
The TTL, example 720h for 1 month
uriSans List<String>
) A list of URI SANS to include
commonName This property is required. string
The common name to use
role This property is required. string
the Role to use as defined under a PKI Tenant resource
tenantId This property is required. string
The tenant ID to create this certificate under
altName string

Deprecated: Deprecated

altNames string
Alternative names to use, comma separated list.
excludeCnFromSans boolean
Exclude common name from SAN
ipSans string[]
) A list of IP SANS to include
otherSans string[]
) A list of other SANS to include
pkiCertId string
triggers {[key: string]: string}
) An list of strings which when changes will trigger recreation of the resource
ttl string
The TTL, example 720h for 1 month
uriSans string[]
) A list of URI SANS to include
common_name This property is required. str
The common name to use
role This property is required. str
the Role to use as defined under a PKI Tenant resource
tenant_id This property is required. str
The tenant ID to create this certificate under
alt_name str

Deprecated: Deprecated

alt_names str
Alternative names to use, comma separated list.
exclude_cn_from_sans bool
Exclude common name from SAN
ip_sans Sequence[str]
) A list of IP SANS to include
other_sans Sequence[str]
) A list of other SANS to include
pki_cert_id str
triggers Mapping[str, str]
) An list of strings which when changes will trigger recreation of the resource
ttl str
The TTL, example 720h for 1 month
uri_sans Sequence[str]
) A list of URI SANS to include
commonName This property is required. String
The common name to use
role This property is required. String
the Role to use as defined under a PKI Tenant resource
tenantId This property is required. String
The tenant ID to create this certificate under
altName String

Deprecated: Deprecated

altNames String
Alternative names to use, comma separated list.
excludeCnFromSans Boolean
Exclude common name from SAN
ipSans List<String>
) A list of IP SANS to include
otherSans List<String>
) A list of other SANS to include
pkiCertId String
triggers Map<String>
) An list of strings which when changes will trigger recreation of the resource
ttl String
The TTL, example 720h for 1 month
uriSans List<String>
) A list of URI SANS to include

Outputs

All input properties are implicitly available as output properties. Additionally, the PkiCert resource produces the following output properties:

CaChainPem string
The full CA chain in PEM format
CertPem string
The certificate in PEM format
Expiration double
(int) The Unix timestamp when the certificate will expire
Id string
The provider-assigned unique ID for this managed resource.
IssuingCaPem string
The issuing CA certicate in PEM format
PrivateKeyPem string
The private key in PEM format
SerialNumber string
The certificate serial number (equal to resource ID)
CaChainPem string
The full CA chain in PEM format
CertPem string
The certificate in PEM format
Expiration float64
(int) The Unix timestamp when the certificate will expire
Id string
The provider-assigned unique ID for this managed resource.
IssuingCaPem string
The issuing CA certicate in PEM format
PrivateKeyPem string
The private key in PEM format
SerialNumber string
The certificate serial number (equal to resource ID)
caChainPem String
The full CA chain in PEM format
certPem String
The certificate in PEM format
expiration Double
(int) The Unix timestamp when the certificate will expire
id String
The provider-assigned unique ID for this managed resource.
issuingCaPem String
The issuing CA certicate in PEM format
privateKeyPem String
The private key in PEM format
serialNumber String
The certificate serial number (equal to resource ID)
caChainPem string
The full CA chain in PEM format
certPem string
The certificate in PEM format
expiration number
(int) The Unix timestamp when the certificate will expire
id string
The provider-assigned unique ID for this managed resource.
issuingCaPem string
The issuing CA certicate in PEM format
privateKeyPem string
The private key in PEM format
serialNumber string
The certificate serial number (equal to resource ID)
ca_chain_pem str
The full CA chain in PEM format
cert_pem str
The certificate in PEM format
expiration float
(int) The Unix timestamp when the certificate will expire
id str
The provider-assigned unique ID for this managed resource.
issuing_ca_pem str
The issuing CA certicate in PEM format
private_key_pem str
The private key in PEM format
serial_number str
The certificate serial number (equal to resource ID)
caChainPem String
The full CA chain in PEM format
certPem String
The certificate in PEM format
expiration Number
(int) The Unix timestamp when the certificate will expire
id String
The provider-assigned unique ID for this managed resource.
issuingCaPem String
The issuing CA certicate in PEM format
privateKeyPem String
The private key in PEM format
serialNumber String
The certificate serial number (equal to resource ID)

Look up Existing PkiCert Resource

Get an existing PkiCert resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PkiCertState, opts?: CustomResourceOptions): PkiCert
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        alt_name: Optional[str] = None,
        alt_names: Optional[str] = None,
        ca_chain_pem: Optional[str] = None,
        cert_pem: Optional[str] = None,
        common_name: Optional[str] = None,
        exclude_cn_from_sans: Optional[bool] = None,
        expiration: Optional[float] = None,
        ip_sans: Optional[Sequence[str]] = None,
        issuing_ca_pem: Optional[str] = None,
        other_sans: Optional[Sequence[str]] = None,
        pki_cert_id: Optional[str] = None,
        private_key_pem: Optional[str] = None,
        role: Optional[str] = None,
        serial_number: Optional[str] = None,
        tenant_id: Optional[str] = None,
        triggers: Optional[Mapping[str, str]] = None,
        ttl: Optional[str] = None,
        uri_sans: Optional[Sequence[str]] = None) -> PkiCert
func GetPkiCert(ctx *Context, name string, id IDInput, state *PkiCertState, opts ...ResourceOption) (*PkiCert, error)
public static PkiCert Get(string name, Input<string> id, PkiCertState? state, CustomResourceOptions? opts = null)
public static PkiCert get(String name, Output<String> id, PkiCertState state, CustomResourceOptions options)
resources:  _:    type: hsdp:PkiCert    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AltName string

Deprecated: Deprecated

AltNames string
Alternative names to use, comma separated list.
CaChainPem string
The full CA chain in PEM format
CertPem string
The certificate in PEM format
CommonName string
The common name to use
ExcludeCnFromSans bool
Exclude common name from SAN
Expiration double
(int) The Unix timestamp when the certificate will expire
IpSans List<string>
) A list of IP SANS to include
IssuingCaPem string
The issuing CA certicate in PEM format
OtherSans List<string>
) A list of other SANS to include
PkiCertId string
PrivateKeyPem string
The private key in PEM format
Role string
the Role to use as defined under a PKI Tenant resource
SerialNumber string
The certificate serial number (equal to resource ID)
TenantId string
The tenant ID to create this certificate under
Triggers Dictionary<string, string>
) An list of strings which when changes will trigger recreation of the resource
Ttl string
The TTL, example 720h for 1 month
UriSans List<string>
) A list of URI SANS to include
AltName string

Deprecated: Deprecated

AltNames string
Alternative names to use, comma separated list.
CaChainPem string
The full CA chain in PEM format
CertPem string
The certificate in PEM format
CommonName string
The common name to use
ExcludeCnFromSans bool
Exclude common name from SAN
Expiration float64
(int) The Unix timestamp when the certificate will expire
IpSans []string
) A list of IP SANS to include
IssuingCaPem string
The issuing CA certicate in PEM format
OtherSans []string
) A list of other SANS to include
PkiCertId string
PrivateKeyPem string
The private key in PEM format
Role string
the Role to use as defined under a PKI Tenant resource
SerialNumber string
The certificate serial number (equal to resource ID)
TenantId string
The tenant ID to create this certificate under
Triggers map[string]string
) An list of strings which when changes will trigger recreation of the resource
Ttl string
The TTL, example 720h for 1 month
UriSans []string
) A list of URI SANS to include
altName String

Deprecated: Deprecated

altNames String
Alternative names to use, comma separated list.
caChainPem String
The full CA chain in PEM format
certPem String
The certificate in PEM format
commonName String
The common name to use
excludeCnFromSans Boolean
Exclude common name from SAN
expiration Double
(int) The Unix timestamp when the certificate will expire
ipSans List<String>
) A list of IP SANS to include
issuingCaPem String
The issuing CA certicate in PEM format
otherSans List<String>
) A list of other SANS to include
pkiCertId String
privateKeyPem String
The private key in PEM format
role String
the Role to use as defined under a PKI Tenant resource
serialNumber String
The certificate serial number (equal to resource ID)
tenantId String
The tenant ID to create this certificate under
triggers Map<String,String>
) An list of strings which when changes will trigger recreation of the resource
ttl String
The TTL, example 720h for 1 month
uriSans List<String>
) A list of URI SANS to include
altName string

Deprecated: Deprecated

altNames string
Alternative names to use, comma separated list.
caChainPem string
The full CA chain in PEM format
certPem string
The certificate in PEM format
commonName string
The common name to use
excludeCnFromSans boolean
Exclude common name from SAN
expiration number
(int) The Unix timestamp when the certificate will expire
ipSans string[]
) A list of IP SANS to include
issuingCaPem string
The issuing CA certicate in PEM format
otherSans string[]
) A list of other SANS to include
pkiCertId string
privateKeyPem string
The private key in PEM format
role string
the Role to use as defined under a PKI Tenant resource
serialNumber string
The certificate serial number (equal to resource ID)
tenantId string
The tenant ID to create this certificate under
triggers {[key: string]: string}
) An list of strings which when changes will trigger recreation of the resource
ttl string
The TTL, example 720h for 1 month
uriSans string[]
) A list of URI SANS to include
alt_name str

Deprecated: Deprecated

alt_names str
Alternative names to use, comma separated list.
ca_chain_pem str
The full CA chain in PEM format
cert_pem str
The certificate in PEM format
common_name str
The common name to use
exclude_cn_from_sans bool
Exclude common name from SAN
expiration float
(int) The Unix timestamp when the certificate will expire
ip_sans Sequence[str]
) A list of IP SANS to include
issuing_ca_pem str
The issuing CA certicate in PEM format
other_sans Sequence[str]
) A list of other SANS to include
pki_cert_id str
private_key_pem str
The private key in PEM format
role str
the Role to use as defined under a PKI Tenant resource
serial_number str
The certificate serial number (equal to resource ID)
tenant_id str
The tenant ID to create this certificate under
triggers Mapping[str, str]
) An list of strings which when changes will trigger recreation of the resource
ttl str
The TTL, example 720h for 1 month
uri_sans Sequence[str]
) A list of URI SANS to include
altName String

Deprecated: Deprecated

altNames String
Alternative names to use, comma separated list.
caChainPem String
The full CA chain in PEM format
certPem String
The certificate in PEM format
commonName String
The common name to use
excludeCnFromSans Boolean
Exclude common name from SAN
expiration Number
(int) The Unix timestamp when the certificate will expire
ipSans List<String>
) A list of IP SANS to include
issuingCaPem String
The issuing CA certicate in PEM format
otherSans List<String>
) A list of other SANS to include
pkiCertId String
privateKeyPem String
The private key in PEM format
role String
the Role to use as defined under a PKI Tenant resource
serialNumber String
The certificate serial number (equal to resource ID)
tenantId String
The tenant ID to create this certificate under
triggers Map<String>
) An list of strings which when changes will trigger recreation of the resource
ttl String
The TTL, example 720h for 1 month
uriSans List<String>
) A list of URI SANS to include

Import

ing

Importing a HSDP PKI certificate is supported but not recommended as the private key will be missing, rendering the resource more or less useless in most cases. You can import a certificate using the serial number

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
hsdp philips-software/terraform-provider-hsdp
License
Notes
This Pulumi package is based on the hsdp Terraform Provider.
hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
philips-software/terraform-provider-hsdp