openapi: 3.2.0 info: title: Cisco Ise Certificateprofile API version: '1.0' description: 'Operations tagged certificateprofile across 2 of this provider''s published API definitions: cisco-ise-ers-open-api-ers-apis.yaml, cisco-ise-legacy-ers-certificate-profile.yaml. Each path carries the servers of the definition it was published in.' x-provenance: method: harvested authored_by: Cisco harvested_by: API Evangelist harvested_on: '2026-08-19' first_party: true provider_published: true source_host: pubhub.devnetcloud.com note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source. derived_view: Per-tag view of cisco-ise-legacy-ers-certificate-profile.yaml, the provider's source document. Operations and schemas are the provider's, unmodified; only the partition is ours. derived_from: cisco-ise-legacy-ers-certificate-profile.yaml operation_coverage: 8/15 x-evidence: - type: source url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/ - type: source url: https://developer.cisco.com/docs/identity-services-engine/ servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' tags: - name: certificateprofile paths: /certificateprofile/: get: tags: - certificateprofile summary: Get-All parameters: - $ref: '#/components/parameters/ppage' - $ref: '#/components/parameters/psize' responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileListResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileListResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] post: tags: - certificateprofile summary: Create parameters: [] requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '201': description: Created '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /certificateprofile/name/{name}: get: tags: - certificateprofile summary: Get-By-Name parameters: - name: name in: path required: true schema: title: name type: string example: null responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /certificateprofile/{id}: get: tags: - certificateprofile summary: Get-By-Id parameters: - name: id in: path required: true schema: title: id type: string example: null responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' application/xml: schema: $ref: '#/components/schemas/certificateprofileResponse' text/html: schema: type: string example: null '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] put: tags: - certificateprofile summary: Update parameters: - name: id in: path required: true schema: title: id type: string example: null requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/UpdatedFieldsResponse' application/xml: schema: $ref: '#/components/schemas/UpdatedFieldsResponse' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error response content: application/json: schema: $ref: '#/components/schemas/ERSResponse' security: - HTTPBasicAuthentication: [] delete: tags: - certificateprofile summary: Delete parameters: - name: id in: path required: true schema: title: id type: string example: null responses: '204': description: No Content '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null security: - HTTPBasicAuthentication: [] patch: tags: - certificateprofile summary: Patch description: Update any attribute subset. Only attributes that sent will be affected. parameters: - name: id in: path required: true schema: title: id type: string example: null requestBody: content: application/json: schema: $ref: '#/components/schemas/ca.certificateprofile' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false required: true responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/certificateprofileResponse' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '401': description: Unauthorized '403': description: Forbidden '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '406': description: Not Acceptable '415': description: UnSupported Media Type content: application/json: schema: $ref: '#/components/schemas/ERSResponse' application/xml: schema: $ref: '#/components/schemas/ERSResponse' text/html: schema: type: string example: null '500': description: Internal Server Error response content: application/json: schema: $ref: '#/components/schemas/ERSResponse' security: - HTTPBasicAuthentication: [] servers: - url: https://{server}:{port}/ers/config description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs variables: server: description: The host where the API is rooted default: localhost port: description: The port no for CTS APIs is 9063 and for other APIs it is 443 default: '443' /ers/config/certificateprofile/{name}: get: tags: - certificateprofile summary: Get certificate profile by name description:

This API allows the client to get a certificate profile by name.

parameters: - name: name in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: Required Only if Enabled from GUI Example:- fetch schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyname' application/xml: schema: $ref: '#/components/schemas/getbyname' /ers/config/certificateprofile/{id}: get: tags: - certificateprofile summary: Get certificate profile by ID description:

This API allows the client to get a certificate profile by ID.

parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: 'Required Only if Enabled from GUI Example:- fetch' schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyid' application/xml: schema: $ref: '#/components/schemas/getbyid' patch: tags: - certificateprofile summary: Update part of the certificate profile by ID description:

This API allows the client to update part of the certificate profile by ID.

parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getbyid' application/xml: schema: $ref: '#/components/schemas/getbyid' requestBody: content: application/json: schema: $ref: '#/components/schemas/patchRequest' application/xml: schema: $ref: '#/components/schemas/patchRequest' put: tags: - certificateprofile summary: Update certificate profile description:

This API allows the client to update a certificate profile.

parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: The Token value from the GET X-CSRF-TOKEN fetch request schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/update' application/xml: schema: $ref: '#/components/schemas/update' requestBody: content: application/json: schema: $ref: '#/components/schemas/put' application/xml: schema: $ref: '#/components/schemas/put' required: true delete: tags: - certificateprofile summary: Delete the certificate profile by ID description:

This API allows the client to delete the certificate profile by ID.

parameters: - name: id in: path required: true schema: type: string - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string responses: 204: description: No Content /ers/config/certificateprofile: get: tags: - certificateprofile summary: Get all certificate profiles description:

This API allows the client to get all the certificate profiles.

parameters: - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificatetemplate.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: 'Required Only if Enabled from GUI Example:- fetch' schema: type: string responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/getall' application/xml: schema: $ref: '#/components/schemas/getall' post: tags: - certificateprofile summary: Create certificate profile description:

This API allows the client to create a certificate profile.

parameters: - in: header name: HTTP ERS-Media-Type Header description: Example:- ca.certificateprofile.1.0 required: false schema: type: string - in: header name: HTTP X-CSRF-TOKEN Header description: The Token value from the GET X-CSRF-TOKEN fetch request schema: type: string responses: 201: description: Created requestBody: content: application/json: schema: $ref: '#/components/schemas/put' application/xml: schema: $ref: '#/components/schemas/put' required: true /ers/config/certificateprofile/versioninfo: get: tags: - certificateprofile summary: Get certificate profile version information description:

This API helps to retrieve the version information related to the certificate profile.

responses: 200: description: OK content: application/json: schema: $ref: '#/components/schemas/VersionInfo' components: schemas: Link: type: object properties: rel: type: string example: self enum: - next - previous - self - status href: type: string example: https://{server}:{port}/ers/config type: type: string example: application/json example: null certificateprofileResponseEntity: properties: allowedAsUserName: title: allowedAsUserName type: boolean description: To be set true or false example: null externalIdentityStoreName: title: externalIdentityStoreName type: string description: referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen example: null certificateAttributeName: title: certificateAttributeName type: object description: 'Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in usernameFrom. Allowed values: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS. Additional internal value ALL_SUBJECT_AND_ALTERNATIVE_NAMES is used automatically when usernameFrom=UPN' example: null matchMode: title: matchMode type: object description: 'Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON' example: null usernameFrom: title: usernameFrom type: object description: 'The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD)' example: null name: title: name type: string description: name example: null id: title: id type: string description: Id example: null description: title: description type: string description: Description example: null link: $ref: '#/components/schemas/Link' example: null ca.certificateprofile: required: - CertificateProfile type: object properties: CertificateProfile: $ref: '#/components/schemas/CertificateProfile' example: null updatedField: properties: field: type: string example: null oldValue: type: string example: null newValue: type: string example: null example: null certificateprofileListResponseEntity: properties: id: title: id type: string description: Id description example: null name: title: name type: string description: name description example: null description: title: description type: string description: description example: null link: $ref: '#/components/schemas/Link' example: null CertificateProfile: required: - name properties: allowedAsUserName: title: allowedAsUserName type: boolean description: To be set true or false example: null externalIdentityStoreName: title: externalIdentityStoreName type: string description: referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen example: null certificateAttributeName: title: certificateAttributeName type: object description: 'Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in usernameFrom. Allowed values: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS. Additional internal value ALL_SUBJECT_AND_ALTERNATIVE_NAMES is used automatically when usernameFrom=UPN' example: null matchMode: title: matchMode type: object description: 'Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON' example: null usernameFrom: title: usernameFrom type: object description: 'The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD)' example: null name: title: name type: string description: name example: null id: title: id type: string description: Id example: null description: title: description type: string description: Description example: null example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false certificateprofileListResponse: type: object properties: SearchResult: type: object properties: total: type: integer example: '2' resources: type: array example: null items: $ref: '#/components/schemas/certificateprofileListResponseEntity' example: null example: SearchResult: total: 2 previousPage: rel: previous href: link-to-previous-page type: application/xml nextPage: rel: next href: link-to-next-page type: application/xml resources: - name: name1 link: rel: self href: type: application/xml description: description1 id: id1 - name: name2 link: rel: self href: type: application/xml description: description2 id: id2 ERSResponse: type: object properties: operation: type: string example: Operation messages: type: array example: null items: properties: title: type: string example: title type: type: string example: type code: type: string example: code example: null example: null certificateprofileResponse: type: object properties: CertificateProfile: $ref: '#/components/schemas/certificateprofileResponseEntity' example: CertificateProfile: certificateAttributeName: SUBJECT_COMMON_NAME name: name externalIdentityStoreName: '[not applicable]' description: descp id: dceff5c6-d4f2-48b7-92ae-87adcdd2777b matchMode: NEVER usernameFrom: CERTIFICATE allowedAsUserName: false UpdatedFieldsResponse: type: object properties: UpdatedFieldsList: type: object properties: updatedField: type: array example: null items: $ref: '#/components/schemas/updatedField' example: null example: null patchRequestBody: type: object properties: any-resource-attribute: type: string example: some-updated-value another-resource-attribute: type: string example: some-updated-value getbyname: type: object properties: CertificateProfile: $ref: '#/components/schemas/getbyname1' put1: type: object properties: id: type: string example: da095377-dce8-486e-933a-6ea788bbf51a name: type: string example: test_2 externalIdentityStoreName: type: array items: type: string enum: - not_applicable certificateAttributeName: type: array items: type: string enum: - SUBJECT_COMMON_NAME allowedAsUserName: type: boolean example: false matchMode: type: array items: type: string enum: - NEVER usernameFrom: type: array items: type: string enum: - CERTIFICATE VersionInfo: type: object properties: VersionInfo: $ref: '#/components/schemas/version' patchRequest: type: object properties: CertificateProfile: $ref: '#/components/schemas/patchRequestBody' getbyid1: type: object properties: id: type: string example: da095377-dce8-486e-933a-6ea788bbf51a name: type: string example: test_2 externalIdentityStoreName: type: array items: type: string enum: - not_applicable certificateAttributeName: type: array items: type: string enum: - SUBJECT_COMMON_NAME allowedAsUserName: type: boolean example: false matchMode: type: array items: type: string enum: - NEVER usernameFrom: type: array items: type: string enum: - CERTIFICATE link: $ref: '#/components/schemas/link3' link3: type: object properties: rel: type: string example: self href: type: string example: https://:9060/ers/config/certificateprofile/c8e295d0-75c2-11eb-a138-525a27a1cf46 type: type: string example: application/xml update1: type: object properties: updatedField: type: array example: - field: field1 oldValue: val_old newValue: val_new - field: some other field oldValue: val_old newValue: val_new items: properties: name: type: string update: type: object properties: UpdatedFieldsList: $ref: '#/components/schemas/update1' getbyid: type: object properties: CertificateProfile: $ref: '#/components/schemas/getbyid1' put: type: object properties: CertificateProfile: $ref: '#/components/schemas/put1' version: type: object properties: currentServerVersion: type: string example: '1.0' supportedVersions: type: string example: '1.0' link: $ref: '#/components/schemas/link1' getbyname1: type: object properties: id: type: string example: da095377-dce8-486e-933a-6ea788bbf51a name: type: string example: test_2 externalIdentityStoreName: type: array items: type: string enum: - not_applicable certificateAttributeName: type: array items: type: string enum: - SUBJECT_COMMON_NAME allowedAsUserName: type: boolean example: false matchMode: type: array items: type: string enum: - NEVER usernameFrom: type: array items: type: string enum: - CERTIFICATE link: $ref: '#/components/schemas/link2' getall1: type: object properties: total: type: integer example: 0 resources: type: array example: - id: 925b6d20-8c01-11e6-996c-525400b48521 name: Preloaded_Certificate_Profile description: Precreated Certificate Authorization Profile. link: rel: self href: https:/:9060/ers/config/certificateprofile/925b6d20-8c01-11e6-996c-525400b48521 type: application/json items: properties: name: type: string getall: type: object properties: SearchResult: $ref: '#/components/schemas/getall1' link2: type: object properties: rel: type: string example: self href: type: string example: https://:9060/ers/config/certificateprofile/name/test_2 type: type: string example: application/xml link1: type: object properties: rel: type: string example: self href: type: string example: https://:9060/ers/config/certificateprofile/versioninfo type: type: string example: application/xml parameters: ppage: name: page in: query description: Page Number (0...N) allowReserved: true schema: type: integer example: null example: '1' psize: name: size in: query description: Items by Page allowReserved: true schema: type: integer example: null example: '20' securitySchemes: HTTPBasicAuthentication: type: http scheme: basic x-refined-from: - cisco-ise-ers-open-api-ers-apis.yaml - cisco-ise-legacy-ers-certificate-profile.yaml