Foxpass HomeHomeGuidesAPI Reference
API Reference
Contact UsFoxpass Free TrialLog In

POST /pki/generate_client_certificate/

post
https://api.foxpass.com/v1/pki/generate_client_certificate/

Generate an Enterprise PKI client certificate signed by a specified Sub CA. Requires cn and ca_serial. Copy the Sub CA hex serial from PKI -> Enterprise PKI. cert_type is key-cert (default, PEM cert + key) or p12 (password-protected PKCS#12, base64-encoded). Enterprise PKI must be enabled. The API key must be writable. Root CAs and CSR-imported Sub CAs without a private key in Foxpass cannot sign certificates.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

Common Name. Identifies the user, email address, device, or service the certificate is issued to.

string
required
^[0-9a-fA-F]+$

Hex serial of the PKI Sub CA that will sign the certificate. Copy this from PKI -> Enterprise PKI. Root CAs and CSR-imported Sub CAs without a private key in Foxpass cannot sign certificates.

string

Subject Alternative Name. Optional.

string
enum

key-cert (default) returns a PEM certificate and private key. p12 returns a password-protected PKCS#12 bundle (base64-encoded) and requires password.

Allowed:
string

Required when cert_type is p12. Password used to encrypt the PKCS#12 bundle.

string

Required for local-auth Basic-auth users with MFA.

Responses

405

Method not allowed.

Updated about 16 hours ago

Language
Credentials
Header
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated about 16 hours ago

Copyright © 2026 Foxpass, Inc.
Copyright © 2026 Foxpass, Inc.
×

Sign up now

Use your G Suite or Office 365 account, or sign up with your email address.


(Have an account already? Click here to log in.)

By signing up, you agree to our terms of use and privacy policy.