POST Certificate Stores Certificates Add

Required. An array of certificate store GUIDs to identify the certificate stores to which the certificate should be added and provide appropriate reference information for the certificate in the store. Show certificate store details.

Name	Description
CertificateStoreIds	Required. A string containing the GUID for the certificate store to which the certificate should be added.
Alias	Required*. A string providing an alias to be used for the certificate upon entry into the certificate store. The function of the alias varies depending on the certificate store type. For example, for an F5 device, it serves as the file name used to store the file in the device file system, minus the extension (e.g. use alias MyFile for a file named MyFile.pfx) while for a Java keystore, it is stored in the keystore associated with the certificate. Some certificate store types don't require an alias and some do. See Add Certificate in the Keyfactor Command Reference Guide for more information. This field may be required depending on the store type selected.
JobFields	An array of key/value pairs that sets extra values for the job fields that will be associated with the add job. This option is typically used with custom Any Agent implementations.
Overwrite	A Boolean that sets whether a certificate in the store with the Alias provided should be overwritten with the certificate being added (true) or not (false). The default is false. Use the GET /Certificates/Locations/{id} method (see GET Certificates Locations ID) to retrieve a list of the locations an existing certificate is in to determine the alias used for the certificate in the certificate store.
EntryPassword	The password to set on the entry within the certificate store, if applicable. Only select certificate stores support entry passwords (e.g. Java keystores). See entry password details. Name Description SecretValue A string containing the password. This value only needs to be supplied if you're storing your password in the Keyfactor Command database. Provider An integer that identifies the PAM provider used to store the password. Use the GET /PamProviders method (see GET PAM Providers) to retrieve a list of your defined PAM providers to determine the PAM provider ID to use. Parameters The parameters required by your PAM provider, containing the information that identifies the location of the password in the PAM solution. Use the GET /PamProviders method (see GET PAM Providers) to retrieve a list of the parameters used by your PAM provider. Only parameters where InstanceLevel is equal to true need to be supplied in the request. For example, for Delinea (formerly Thycotic), this might be: "EntryPassword": {   "Provider": 2,   "Parameters": {     "SecretId": 5   } }, For CyberArk, this might be: "EntryPassword": {   "Provider": 5,   "Parameters": {     "Folder": "Root",     "Object": "F5Password"   } },
PfxPassword	A string that sets the password to use when saving a certificate with its private key Private keys are used in cryptography (symmetric and asymmetric) to encrypt or sign content. In asymmetric cryptography, they are used together in a key pair with a public key. The private or secret key is retained by the key's creator, making it highly secure. in the certificate store. This is only relevant if there's a private key being added along with the certificate.
IncludePrivateKey	A Boolean that sets whether to include the private key of the certificate in the certificate store if private keys are optional for the given certificate store (true) or not (false). The default is false.

For example, to add to one IIS personal store and one NetScaler store without overwriting an existing certificate:

"CertificateStores": [
   {
      "Alias": "MyCertificate.pfx",
      "CertificateStoreId": "fde12aa7-6643-43db-88e8-5c91c5ce78b3",
      "IncludePrivateKey": true
   },
   {
      "Alias": "C2107973A928859C21330E566B299CD4A0705AE8",
      "CertificateStoreId": "322e12ea-43b2-4aab-80ae-c4ad4569b4e7",
      "IncludePrivateKey": true
   }
]