Truststore Certificate List REST Service

Use Truststore Certificate List REST Service to list certificates that are present in the IBM Security Guardium Key Lifecycle Manager internal truststore.

Operation
GET
URL
https://<host>:<port>/SKLM/rest/v1/trustStoreCertificates
https://<host>:<port>/SKLM/rest/v1/trustStoreCertificates?alias=<aliasName>

By default, Guardium Key Lifecycle Manager server listens to the secure port 9443 (HTTPS) for communication. During IBM Security Guardium Key Lifecycle Manager installation, you can modify this default port.

Request

Request Parameters
Parameter Description
host Specify the IP address or hostname of the IBM Security Guardium Key Lifecycle Manager server.
port Specify the port number on which the IBM Security Guardium Key Lifecycle Manager server listens for requests.
Request Headers
Header name Value
Content-Type application/json
Accept application/json
Authorization SKLMAuth userAuthId=<authIdValue>
Accept-Language Any valid locale that is supported by IBM Security Guardium Key Lifecycle Manager. For example, en or de.
Query parameter

JSON object with the following specification:

JSON property name Description
alias Optional. Specify a unique name for the certificate. To list all certificates, do not specify an alias.

Response

Response Headers
Header name Value and description
Status Code
200 OK
The request was successful. The response body contains the requested representation.
400 Bad Request
The authentication information was not provided in the correct format.
401 Unauthorized
The authentication credentials were missing or incorrect.
404 Not Found Error
The processing of the request fails.
500 Internal Server Error
The processing of the request fails because of an unexpected condition on the server.
Content-Type application/json
Content-Language Locale for the response message.
Success response body

JSON array that contains JSON objects with the following specification:

JSON property name Description
alias Returns the alias name of the truststore certificate.
key state Returns the state of the certificate, such as ACTIVE.
issuer name Returns the name of the issuer of the certificate.
subject name Returns the subject name of the certificate.
activation date Returns the activation date of the certificate.
creation date Returns the certificate creation date.
expiration date Returns the certificate expiration date.
trusted Indicates whether the certificate is trusted by returning the following values:
1
Trusted
0
Not trusted.
serial number Returns the certificate serial number.
hash value Returns the digest value for the managed object, that is, certificate.
Error Response Body

JSON object with the following specification.

JSON property name Description
code Returns the application error code.
message Returns a message that describes the error.

Examples

Service request to obtain truststore certificate list
GET https://localhost:<port>/SKLM/rest/v1/trustStoreCertificates?
alias=ibmdiskds5000
Content-Type: application/json
Accept : application/json
Authorization: SKLMAuth userAuthId=139aeh34567m
Success response
Status Code : 200 OK
    [
       {
           "alias": "ibmdiskdriveds5000",
           "key state": "ACTIVE",
           "issuer name": "O=ibmDiskDrive,OU=StorageHardware,
						CN=DS5000StorageRoot,C=US",
           "subject name": "O=ibmDiskDrive,OU=StorageHardware,
						CN=DS5000StorageRoot,C=US",
           "activation date": "2/15/10 9:20:45 PM India Standard 
            Time",
           "creation date": "6/27/13 1:06:33 AM India Standard 
            Time",
           "expiration date": "2/10/30 9:20:45 PM India Standard 
            Time",
           "trusted": "1",
           "serial number": "0",
           "hash value": "0000: fa 65 6f f6 37 2c 0f 0e 42 dc b9 2d 
						a9 5f 8b 01 .eo.7...B....... 0010: 2d ac 0c 73 bc c8 d0 
						a9 62 0d 33 e3 e0 d8 37 5c ...s....b.3...7. "
       }
    ]