A client certificate authority is a trusted root or intermediate certificate that the event broker service uses to validate client certificates during mutual TLS (mTLS) authentication.

Certificate content is write-only and is never returned.

The API updates only the fields that the request includes. Other fields keep their current values.

You cannot change the name of a certificate authority. To rename it, delete it and create it again with the new name.

You cannot update a certificate authority that was created without a client or domain type. The request returns 400 Bad Request. Delete the certificate authority and create it again as a client or domain certificate authority.

This request is asynchronous. The response contains an operation ID that you can use to poll for completion using Get the status of a service operation.

Your token must have one of the permissions listed in the Token Permissions.