openapi: 3.2.0 info: title: Cisco Ise Certificateprofile API version: '1.0' description: 'Operations tagged certificateprofile across 2 of this provider''s published API definitions: cisco-ise-ers-open-api-ers-apis.yaml, cisco-ise-legacy-ers-certificate-profile.yaml. Each path carries the servers of the definition it was published in.' x-provenance: method: harvested authored_by: Cisco harvested_by: API Evangelist harvested_on: '2026-08-19' first_party: true provider_published: true source_host: pubhub.devnetcloud.com note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source. derived_view: Per-tag view of cisco-ise-legacy-ers-certificate-profile.yaml, the provider's source document. Operations and schemas are the provider's, unmodified; only the partition is ours. derived_from: cisco-ise-legacy-ers-certificate-profile.yaml operation_coverage: 8/15 x-evidence: - type: source url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/ - type: source url: https://developer.cisco.com/docs/identity-services-engine/ servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' tags: - name: certificateprofile paths: /certificateprofile/: get: tags: - certificateprofile summary: Get-All parameters: - $ref: '#/components/parameters/ppage' - $ref: '#/components/parameters/psize' responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileListResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileListResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] post: tags: - certificateprofile summary: Create parameters: [] requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '201': description: Created '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /certificateprofile/name/{name}: get: tags: - certificateprofile summary: Get-By-Name parameters: - name: name in: path required: true schema: title: name type: string example: null responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /certificateprofile/{id}: get: tags: - certificateprofile summary: Get-By-Id parameters: - name: id in: path required: true schema: title: id type: string example: null responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] put: tags: - certificateprofile summary: Update parameters: - name: id in: path required: true schema: title: id type: string example: null requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/UpdatedFieldsResponse' application/xml: schema: $ref: '#/components/schemas/UpdatedFieldsResponse' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error response content: application/json: schema: $ref: '#/components/schemas/ERSResponse' security: - HTTPBasicAuthentication: [] delete: tags: - certificateprofile summary: Delete parameters: - name: id in: path required: true schema: title: id type: string example: null responses: '204': description: No Content '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] patch: tags: - certificateprofile summary: Patch description: Update any attribute subset. Only attributes that sent will be affected. parameters: - name: id in: path required: true schema: title: id type: string example: null requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error response content: application/json: schema: $ref: '#/components/schemas/ERSResponse' security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /ers/config/certificateprofile/{name}: get: tags: - certificateprofile summary: Get certificate profile by name description:
This API allows the client to get a certificate profile by name.
parameters: - name: name in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: Required Only if Enabled from GUI Example:- fetch schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyname' application/xml: schema: $ref: '#/components/schemas/getbyname' /ers/config/certificateprofile/{id}: get: tags: - certificateprofile summary: Get certificate profile by ID description:This API allows the client to get a certificate profile by ID.
parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: 'Required Only if Enabled from GUI Example:- fetch' schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyid' application/xml: schema: $ref: '#/components/schemas/getbyid' patch: tags: - certificateprofile summary: Update part of the certificate profile by ID description:This API allows the client to update part of the certificate profile by ID.
parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyid' application/xml: schema: $ref: '#/components/schemas/getbyid' requestBody: content: application/json: schema: $ref: '#/components/schemas/patchRequest' application/xml: schema: $ref: '#/components/schemas/patchRequest' put: tags: - certificateprofile summary: Update certificate profile description:This API allows the client to update a certificate profile.
parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: The Token value from the GET X-CSRF-TOKEN fetch request schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/update' application/xml: schema: $ref: '#/components/schemas/update' requestBody: content: application/json: schema: $ref: '#/components/schemas/put' application/xml: schema: $ref: '#/components/schemas/put' required: true delete: tags: - certificateprofile summary: Delete the certificate profile by ID description:This API allows the client to delete the certificate profile by ID.
parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string responses: 204: description: No Content /ers/config/certificateprofile: get: tags: - certificateprofile summary: Get all certificate profiles description:This API allows the client to get all the certificate profiles.
parameters: - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificatetemplate.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: 'Required Only if Enabled from GUI Example:- fetch' schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getall' application/xml: schema: $ref: '#/components/schemas/getall' post: tags: - certificateprofile summary: Create certificate profile description:This API allows the client to create a certificate profile.
parameters: - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: The Token value from the GET X-CSRF-TOKEN fetch request schema: type: string responses: 201: description: Created requestBody: content: application/json: schema: $ref: '#/components/schemas/put' application/xml: schema: $ref: '#/components/schemas/put' required: true /ers/config/certificateprofile/versioninfo: get: tags: - certificateprofile summary: Get certificate profile version information description:This API helps to retrieve the version information related to the certificate profile.
responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/VersionInfo' components: schemas: Link: type: object properties: rel: type: string example: self enum: - next - previous - self - status href: type: string example: https://{server}:{port}/ers/config type: type: string example: application/json example: null certificateprofileResponseEntity: properties: allowedAsUserName: title: allowedAsUserName type: boolean description: To be set true or false example: null externalIdentityStoreName: title: externalIdentityStoreName type: string description: referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen example: null certificateAttributeName: title: certificateAttributeName type: object description: 'Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in usernameFrom. Allowed values: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS. Additional internal value ALL_SUBJECT_AND_ALTERNATIVE_NAMES is used automatically when usernameFrom=UPN' example: null matchMode: title: matchMode type: object description: 'Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON' example: null usernameFrom: title: usernameFrom type: object description: 'The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD)' example: null name: title: name type: string description: name example: null id: title: id type: string description: Id example: null description: title: description type: string description: Description example: null link: $ref: '#/components/schemas/Link' example: null ca.certificateprofile: required: - CertificateProfile type: object properties: CertificateProfile: $ref: '#/components/schemas/CertificateProfile' example: null updatedField: properties: field: type: string example: null oldValue: type: string example: null newValue: type: string example: null example: null certificateprofileListResponseEntity: properties: id: title: id type: string description: Id description example: null name: title: name type: string description: name description example: null description: title: description type: string description: description example: null link: $ref: '#/components/schemas/Link' example: null CertificateProfile: required: - name properties: allowedAsUserName: title: allowedAsUserName type: boolean description: To be set true or false example: null externalIdentityStoreName: title: externalIdentityStoreName type: string description: referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen example: null certificateAttributeName: title: certificateAttributeName type: object description: 'Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in usernameFrom. Allowed values: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS. Additional internal value ALL_SUBJECT_AND_ALTERNATIVE_NAMES is used automatically when usernameFrom=UPN' example: null matchMode: title: matchMode type: object description: 'Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON' example: null usernameFrom: title: usernameFrom type: object description: 'The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD)' example: null name: title: name type: string description: name example: null id: title: id type: string description: Id example: null description: title: description type: string description: Description example: null example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false certificateprofileListResponse: type: object properties: SearchResult: type: object properties: total: type: integer example: '2' resources: type: array example: null items: $ref: '#/components/schemas/certificateprofileListResponseEntity' example: null example: SearchResult: total: 2 previousPage: rel: previous href: link-to-previous-page type: application/xml nextPage: rel: next href: link-to-next-page type: application/xml resources: - name: name1 link: rel: self href: