{
    "id":"/axapi/v3/pki",
    "type":"object",
    "node-type":"intermediate",
    "title":"pki",
    "operation-not-allowed": ["PUT", "POST", "DELETE"],
    "partition-visibility":"shared",
    "auto-created-object":1,
    "description":"PKI Commands",
    "properties":{
        "placeholder":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "optional":true
        },
        "scep-cert-list":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"scep-cert"
            },
            "uniqueItems":true,
            "$ref":"/axapi/v3/pki/scep-cert/{name}",
            "array":[
                {
                    "properties":{
                        "name":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":63,
                            "partition-visibility":"shared",
                            "description":"Specify Certificate name to be enrolled",
                            "optional":false
                        },
                        "url":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":255,
                            "partition-visibility":"shared",
                            "description":"Specify the Enrollment Agent's absolute URL (Format: http://host/path)",
                            "optional":true
                        },
                        "dn":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Specify the Distinguished-Name to use while enrolling the certificate (Format: \"cn=user, dc=example, dc=com\")",
                            "optional":true
                        },
                        "subject-alternate-name":{
                            "type":"object",
                            "properties":{
                                "san-type":{
                                    "type":"string",
                                    "format":"enum",
                                    "partition-visibility":"shared",
                                    "description":"'email': Enter e-mail address of the subject; 'dns': Enter hostname of the subject; 'ip': Enter IP address of the subject; ",
                                    "enum":[
                                        "email",
                                        "dns",
                                        "ip"
                                    ]
                                },
                                "san-value":{
                                    "type":"string",
                                    "format":"string-rlx",
                                    "minLength":1,
                                    "maxLength":127,
                                    "partition-visibility":"shared",
                                    "description":"Value of subject-alternate-name"
                                }
                            }
                        },
                        "enroll":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Initiates enrollment of device with the CA",
                            "optional":true
                        },
                        "log-level":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":4,
                            "default":1,
                            "partition-visibility":"shared",
                            "description":"level for logging output of scepclient commands(default 1 and detailed 4)",
                            "optional":true
                        },
                        "password":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Specify the password used to enroll the device's certificate",
                            "optional":true
                        },
                        "secret-string":{
                            "type":"string",
                            "format":"password",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"secret password",
                            "optional":true
                        },
                        "encrypted":{
                            "type":"encrypted",
                            "format":"encrypted",
                            "partition-visibility":"shared",
                            "description":"Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)",
                            "optional":true
                        },
                        "renew-before":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-every",
                            "description":"Specify interval before certificate expiry to renew the certificate",
                            "optional":true
                        },
                        "renew-before-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'hour': Number of hours before cert expiry; 'day': Number of days before cert expiry; 'week': Number of weeks before cert expiry; 'month': Number of months before cert expiry(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-before-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "renew-every":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-before",
                            "description":"Specify periodic interval in which to renew the certificate",
                            "optional":true
                        },
                        "minute":{
                            "type":"number",
                            "format":"number",
                            "minimum":2,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "not":"renew-every-type",
                            "description":"Periodic interval in minutes",
                            "optional":true
                        },
                        "renew-every-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "not":"minute",
                            "description":"'hour': Periodic interval in hours; 'day': Periodic interval in days; 'week': Periodic interval in weeks; 'month': Periodic interval in months(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-every-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "key-length":{
                            "type":"string",
                            "format":"enum",
                            "default":"2048",
                            "partition-visibility":"shared",
                            "description":"'1024': Key size 1024 bits; '2048': Key size 2048 bits(default); '4096': Key size 4096 bits; '8192': Key size 8192 bits; ",
                            "enum":[
                                "1024",
                                "2048",
                                "4096",
                                "8192"
                            ],
                            "optional":true
                        },
                        "days":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":3650,
                            "default":1825,
                            "partition-visibility":"shared",
                            "description":"Validity of self-signed certificate (default 1825)",
                            "optional":true
                        },
                        "start-date":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":31,
                            "partition-visibility":"shared",
                            "description":"Start date of self-signed certificate in YYMMDDHHMMSS format specified in UTC time",
                            "optional":true
                        },
                        "end-date":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":31,
                            "partition-visibility":"shared",
                            "description":"End date of self-signed certificate in YYMMDDHHMMSS format specified in UTC time",
                            "optional":true
                        },
                        "method":{
                            "type":"string",
                            "format":"enum",
                            "default":"GET",
                            "partition-visibility":"shared",
                            "description":"'GET': GET request; 'POST': POST request; ",
                            "enum":[
                                "GET",
                                "POST"
                            ],
                            "optional":true
                        },
                        "interval":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":3600,
                            "default":5,
                            "partition-visibility":"shared",
                            "description":"Interval time in seconds to poll when SCEP response is PENDING (default 5)",
                            "optional":true
                        },
                        "max-polltime":{
                            "type":"number",
                            "format":"number",
                            "minimum":15,
                            "maximum":432000,
                            "default":180,
                            "partition-visibility":"shared",
                            "description":"Maximum time in seconds to poll when SCEP response is PENDING (default 180)",
                            "optional":true
                        },
                        "uuid":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "modify-not-allowed":1,
                            "description":"uuid of the object",
                            "optional":true
                        },
                        "user-tag":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Customized tag",
                            "optional":true
                        }
                    },
                    "required":[
                        "name"
                    ]
                }
            ]
        },
        "cmp-cert-list":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"cmp-cert"
            },
            "uniqueItems":true,
            "$ref":"/axapi/v3/pki/cmp-cert/{name}",
            "array":[
                {
                    "properties":{
                        "name":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":63,
                            "partition-visibility":"shared",
                            "description":"Specify Certificate name to be enrolled",
                            "optional":false
                        },
                        "url":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":255,
                            "partition-visibility":"shared",
                            "description":"CMP server's absolute URL(http(s)://host:[port]/path), path is the location to use for the CMP server(aka CMP alias)",
                            "optional":true
                        },
                        "subject-dn":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":2,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Distinguished Name to use while enrolling the certificate(For EJBCA CA, this is the subject DN of an End Entity) (DN OID is case sensitive)",
                            "optional":true
                        },
                        "recipient-dn":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":2,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Distinguished Name of the CMP message recipient, i.e., the CMP server (usually a CA or RA entity)) (DN OIDis case sensitive)",
                            "optional":true
                        },
                        "subject-alternate-name":{
                            "type":"object",
                            "properties":{
                                "san-type":{
                                    "type":"string",
                                    "format":"enum",
                                    "partition-visibility":"shared",
                                    "description":"'email': Enter e-mail address of the subject; 'dns': Enter hostname of the subject; 'ip': Enter IP address of the subject; ",
                                    "enum":[
                                        "email",
                                        "dns",
                                        "ip"
                                    ]
                                },
                                "san-value":{
                                    "type":"string",
                                    "format":"string-rlx",
                                    "minLength":1,
                                    "maxLength":127,
                                    "partition-visibility":"shared",
                                    "description":"Value of subject-alternate-name"
                                }
                            }
                        },
                        "enroll":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Initiates enrollment of device with the CA",
                            "optional":true
                        },
                        "log-level":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":2,
                            "default":1,
                            "partition-visibility":"shared",
                            "description":"Level for logging output of CMP commands(default 1 and detailed 2)",
                            "optional":true
                        },
                        "secret":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Specify the pre-shared secret used to enroll the device's certificate",
                            "optional":true
                        },
                        "secret-string":{
                            "type":"string",
                            "format":"password",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"pre-shared secret",
                            "optional":true
                        },
                        "encrypted":{
                            "type":"encrypted",
                            "format":"encrypted",
                            "partition-visibility":"shared",
                            "description":"Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)",
                            "optional":true
                        },
                        "renew-before":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-every",
                            "description":"Specify interval before certificate expiry to renew the certificate",
                            "optional":true
                        },
                        "renew-before-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'hour': Number of hours before cert expiry; 'day': Number of days before cert expiry; 'week': Number of weeks before cert expiry; 'month': Number of months before cert expiry(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-before-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "renew-every":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-before",
                            "description":"Specify periodic interval in which to renew the certificate",
                            "optional":true
                        },
                        "minute":{
                            "type":"number",
                            "format":"number",
                            "minimum":2,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "not":"renew-every-type",
                            "description":"Periodic interval in minutes",
                            "optional":true
                        },
                        "renew-every-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "not":"minute",
                            "description":"'hour': Periodic interval in hours; 'day': Periodic interval in days; 'week': Periodic interval in weeks; 'month': Periodic interval in months(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-every-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "cert-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Specify the type of certificate",
                            "optional":true
                        },
                        "rsa-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"ecdsa-type",
                            "description":"RSA certificate (default)",
                            "optional":true
                        },
                        "ecdsa-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"rsa-type",
                            "description":"ECDSA certificate",
                            "optional":true
                        },
                        "rsa-key-length":{
                            "type":"string",
                            "format":"enum",
                            "default":"2048",
                            "partition-visibility":"shared",
                            "description":"'1024': Key size 1024 bits; '2048': Key size 2048 bits(default); '4096': Key size 4096 bits; '8192': Key size 8192 bits; ",
                            "enum":[
                                "1024",
                                "2048",
                                "4096",
                                "8192"
                            ],
                            "optional":true
                        },
                        "ec-key-length":{
                            "type":"string",
                            "format":"enum",
                            "default":"384",
                            "partition-visibility":"shared",
                            "description":"'256': Key size 256 bits; '384': Key size 384 bits(default); ",
                            "enum":[
                                "256",
                                "384"
                            ],
                            "optional":true
                        },
                        "max-polltime":{
                            "type":"number",
                            "format":"number",
                            "minimum":5,
                            "maximum":1024,
                            "default":120,
                            "partition-visibility":"shared",
                            "description":"Maximum time in seconds a(n) enrollment/key update may take (default 120)",
                            "optional":true
                        },
                        "cmp-trusted-ca":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":245,
                            "partition-visibility":"shared",
                            "description":"The specific CA to trust while verifying signature of CMP response message",
                            "optional":true
                        },
                        "cmp-trusted-cert":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":245,
                            "partition-visibility":"shared",
                            "description":"The specific CMP server certificate to use and directly trust when verifying signature of CMP response message",
                            "optional":true
                        },
                        "allow-unprotected-errors":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Accept missing or invalid protection of negative responses(CA likes EJCBA tends to not protect negative responses)",
                            "optional":true
                        },
                        "uuid":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "modify-not-allowed":1,
                            "description":"uuid of the object",
                            "optional":true
                        },
                        "user-tag":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Customized tag",
                            "optional":true
                        }
                    },
                    "required":[
                        "name"
                    ]
                }
            ]
        },
        "acme-cert-list":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"acme-cert"
            },
            "uniqueItems":true,
            "$ref":"/axapi/v3/pki/acme-cert/{name}",
            "array":[
                {
                    "properties":{
                        "name":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":63,
                            "partition-visibility":"shared",
                            "description":"Specify Certificate name to be enrolled",
                            "optional":false
                        },
                        "url":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":255,
                            "partition-visibility":"shared",
                            "description":"ACME directory URL. By default, use Let's encrypt as CA server",
                            "optional":true
                        },
                        "staging-url":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":255,
                            "partition-visibility":"shared",
                            "description":"ACME staging directory URL. By default, use Let's encrypt as CA server",
                            "optional":true
                        },
                        "domain":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "description":"Main domain you want to issue the cert for. CA will verify whether you control this domain",
                            "optional":true
                        },
                        "san-domain":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":2048,
                            "partition-visibility":"shared",
                            "description":"Subject-alternate-name dns(s) for your cert, sperated by /",
                            "optional":true
                        },
                        "enroll":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Initiates enrollment with CA. Due to CA rate limit, A10 strongly recommend you set \"run-with-staging-server\" during test",
                            "optional":true
                        },
                        "force":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Ignore the next renewal time and force to renew cert",
                            "optional":true
                        },
                        "staging":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Run ACME operation with staging server. Due to CA rate limit, A10 strongly recommends you set this during test",
                            "optional":true
                        },
                        "log-level":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":2,
                            "default":1,
                            "partition-visibility":"shared",
                            "description":"Level for logging output of ACME commands(default 1 and detailed 2, including debug messages)",
                            "optional":true
                        },
                        "renew-before":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-every",
                            "description":"Specify interval before certificate expiry to renew the certificate",
                            "optional":true
                        },
                        "renew-before-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'hour': Number of hours before cert expiry; 'day': Number of days before cert expiry; 'week': Number of weeks before cert expiry; 'month': Number of months before cert expiry(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-before-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "renew-every":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"renew-before",
                            "description":"Specify periodic interval in which to renew the certificate",
                            "optional":true
                        },
                        "minute":{
                            "type":"number",
                            "format":"number",
                            "minimum":2,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "not":"renew-every-type",
                            "description":"Periodic interval in minutes",
                            "optional":true
                        },
                        "renew-every-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "not":"minute",
                            "description":"'hour': Periodic interval in hours; 'day': Periodic interval in days; 'week': Periodic interval in weeks; 'month': Periodic interval in months(1 month=30 days); ",
                            "enum":[
                                "hour",
                                "day",
                                "week",
                                "month"
                            ],
                            "optional":true
                        },
                        "renew-every-value":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":255,
                            "partition-visibility":"shared",
                            "description":"Value of renewal period",
                            "optional":true
                        },
                        "cert-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Specify the type of certificate",
                            "optional":true
                        },
                        "rsa-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"ecdsa-type",
                            "description":"RSA certificate (default)",
                            "optional":true
                        },
                        "ecdsa-type":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "not":"rsa-type",
                            "description":"ECDSA certificate",
                            "optional":true
                        },
                        "rsa-key-length":{
                            "type":"string",
                            "format":"enum",
                            "default":"2048",
                            "partition-visibility":"shared",
                            "description":"'2048': Key size 2048 bits(default); '3072': Key size 3072 bits; '4096': Key size 4096 bits; '8192': Key size 8192 bits; ",
                            "enum":[
                                "2048",
                                "3072",
                                "4096",
                                "8192"
                            ],
                            "optional":true
                        },
                        "ec-key-length":{
                            "type":"string",
                            "format":"enum",
                            "default":"384",
                            "partition-visibility":"shared",
                            "description":"'256': Key size 256 bits; '384': Key size 384 bits(default); ",
                            "enum":[
                                "256",
                                "384"
                            ],
                            "optional":true
                        },
                        "email":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "description":"A valid email address for your ACME account. CA uses this email to send you expiration or other notices",
                            "optional":true
                        },
                        "vrid":{
                            "type":"number",
                            "format":"number",
                            "minimum":0,
                            "maximum":31,
                            "partition-visibility":"shared",
                            "description":"Specify ha VRRP-A vrid. It is used to sync http-01 challenge token",
                            "optional":true
                        },
                        "eab-key-id":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":256,
                            "partition-visibility":"shared",
                            "description":"The key identifier for ACME External Account Binding",
                            "optional":true
                        },
                        "eab-hmac-key":{
                            "type":"number",
                            "format":"flag",
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"The HMAC key for ACME External Account Binding",
                            "optional":true
                        },
                        "secret-string":{
                            "type":"string",
                            "format":"password",
                            "minLength":1,
                            "maxLength":256,
                            "partition-visibility":"shared",
                            "description":"The HMAC key for ACME External Account Binding",
                            "optional":true
                        },
                        "encrypted":{
                            "type":"encrypted",
                            "format":"encrypted",
                            "partition-visibility":"shared",
                            "description":"Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)",
                            "optional":true
                        },
                        "uuid":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "modify-not-allowed":1,
                            "description":"uuid of the object",
                            "optional":true
                        },
                        "user-tag":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Customized tag",
                            "optional":true
                        }
                    },
                    "required":[
                        "name"
                    ]
                }
            ]
        },
        "copy-cert":{
            "type":"object",
            "$ref":"/axapi/v3/pki/copy-cert",
            "properties":{
                "src-cert":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Source certificate file"
                },
                "rotation":{
                    "type":"number",
                    "format":"number",
                    "minimum":1,
                    "maximum":4,
                    "partition-visibility":"shared",
                    "description":"Specify rotation number of SCEP/CMP generated certificate file"
                },
                "dest-cert":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Destination certificate file"
                },
                "overwrite":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Overwrite the destination file if already present"
                }
            }
        },
        "copy-key":{
            "type":"object",
            "$ref":"/axapi/v3/pki/copy-key",
            "properties":{
                "src-key":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Source key file"
                },
                "rotation":{
                    "type":"number",
                    "format":"number",
                    "minimum":1,
                    "maximum":4,
                    "partition-visibility":"shared",
                    "description":"Specify rotation number of SCEP/CMP generated key file"
                },
                "dest-key":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Destination key file"
                },
                "overwrite":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Overwrite the destination file if already present"
                }
            }
        },
        "delete":{
            "type":"object",
            "$ref":"/axapi/v3/pki/delete",
            "properties":{
                "cert-name":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Certificate file name"
                },
                "ca":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"CA certificate file name"
                },
                "private-key":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"Private key file name"
                },
                "crl":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":255,
                    "partition-visibility":"shared",
                    "description":"CRL file name"
                },
                "csr":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared",
                    "description":"CSR file name"
                }
            }
        },
        "ssli":{
            "type":"object",
            "$ref":"/axapi/v3/pki/ssli",
            "properties":{
                "revoke":{
                    "type":"object",
                    "$ref":"/axapi/v3/pki/ssli/revoke",
                    "properties":{
                        "vip-name":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":63,
                            "partition-visibility":"shared",
                            "description":"VIP name"
                        },
                        "port":{
                            "type":"number",
                            "format":"number",
                            "minimum":0,
                            "maximum":65534,
                            "partition-visibility":"shared",
                            "description":"port number"
                        },
                        "serial":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":63,
                            "partition-visibility":"shared",
                            "description":"Serial number in hex"
                        }
                    }
                },
                "generate":{
                    "type":"object",
                    "$ref":"/axapi/v3/pki/ssli/generate",
                    "properties":{
                        "crl":{
                            "type":"object",
                            "$ref":"/axapi/v3/pki/ssli/generate/crl",
                            "properties":{
                                "vip-name":{
                                    "type":"string",
                                    "format":"string",
                                    "minLength":1,
                                    "maxLength":63,
                                    "partition-visibility":"shared",
                                    "description":"VIP name"
                                },
                                "port":{
                                    "type":"number",
                                    "format":"number",
                                    "minimum":0,
                                    "maximum":65534,
                                    "partition-visibility":"shared",
                                    "description":"port number"
                                }
                            }
                        }
                    }
                }
            }
        },
        "create-oper":{
            "type":"object",
            "$ref":"/axapi/v3/pki/create-oper",
            "properties":{
                "filename":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared"
                },
                "secured":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared"
                },
                "bits":{
                    "type":"string",
                    "format":"enum",
                    "default":"1024",
                    "partition-visibility":"shared",
                    "description":"'256': 256; '384': 384; '1024': 1024; '2048': 2048; '4096': 4096; ",
                    "enum":[
                        "256",
                        "384",
                        "1024",
                        "2048",
                        "4096"
                    ]
                },
                "common-name":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared"
                },
                "valid-days":{
                    "type":"number",
                    "format":"number",
                    "minimum":30,
                    "maximum":3650,
                    "default":730,
                    "partition-visibility":"shared"
                },
                "division":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":63,
                    "partition-visibility":"shared"
                },
                "organization":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":63,
                    "partition-visibility":"shared"
                },
                "locality":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":63,
                    "partition-visibility":"shared"
                },
                "state-province":{
                    "type":"string",
                    "format":"string-rlx",
                    "minLength":1,
                    "maxLength":31,
                    "partition-visibility":"shared"
                },
                "country":{
                    "type":"string",
                    "format":"string",
                    "minLength":2,
                    "maxLength":3,
                    "partition-visibility":"shared"
                },
                "email":{
                    "type":"string",
                    "format":"email-addr",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared"
                },
                "rootca":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared"
                },
                "cert-type":{
                    "type":"string",
                    "format":"enum",
                    "default":"rsa",
                    "partition-visibility":"shared",
                    "description":"'rsa': rsa; 'ecdsa': ecdsa; ",
                    "enum":[
                        "rsa",
                        "ecdsa"
                    ]
                },
                "digest":{
                    "type":"string",
                    "format":"enum",
                    "default":"sha1",
                    "partition-visibility":"shared",
                    "description":"'sha1': sha1; 'sha256': sha256; 'sha384': sha384; 'sha512': sha512; ",
                    "enum":[
                        "sha1",
                        "sha256",
                        "sha384",
                        "sha512"
                    ]
                },
                "csr-generate":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared"
                },
                "v3-request":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared"
                }
            }
        },
        "delete-oper":{
            "type":"object",
            "$ref":"/axapi/v3/pki/delete-oper",
            "properties":{
                "filename":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":245,
                    "partition-visibility":"shared"
                }
            }
        },
        "cert":{
            "type":"object",
            "$ref":"/axapi/v3/pki/cert",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        },
        "ca-cert":{
            "type":"object",
            "$ref":"/axapi/v3/pki/ca-cert",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        },
        "cert-stats":{
            "type":"object",
            "$ref":"/axapi/v3/pki/cert-stats",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        }
    }
}