IntermediateCaCertificate

Intermediate Ca Certificate resource for Zscaler Internet Access.

Resource operations

This resource supports the following standard methods: create(), load(), update(), delete(). They operate on the instance state — set properties with dot notation, then call the method with no arguments. Any other action listed below is a custom action that takes explicit keyword arguments and returns a value.

Quick Start

import zssdk
import logging

# Enable debug logging for IntermediateCaCertificate
logging.getLogger('zssdk.zia').setLevel(logging.DEBUG)
logging.basicConfig(level=logging.DEBUG)

session = zssdk.Session(
    vanity_domain="your-vanity-domain",
    client_id="your-client-id",
    client_secret="your-client-secret",
)

# Get a specific IntermediateCaCertificate
resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
resource.load()
print(resource)

# Debug output shows HTTP request/response details

Identifiers

Name	Type	Description
id	string	Unique identifier

Actions

create()

Creates a new IntermediateCaCertificate. Set properties on the resource instance, then call create() — this method takes no arguments.

Properties for creation:

Name	Type	Required	Description
cert_exp_date	long	No	-
cert_start_date	long	No	-
csr_file_name	string	No	-
csr_generation_time	integer	No	-
current_state	string	No	-
default_certificate	boolean	No	-
description	string	No	-
hsm_attestation_verified_time	integer	No	-
id	integer	No	-
key_generation_time	integer	No	-
name	string	No	-
public_key	string	No	-
region	string	No	-
status	string	No	-
type	string	No	-
uploaded_cert_chain_file_name	string	No	-
uploaded_cert_file_name	string	No	-

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate()
resource.cert_exp_date = 3600
resource.cert_start_date = 3600
resource.csr_file_name = "example-csr-file-name"
resource.create()
print(f"Created with ID: {resource.id}")

delete()

Deletes a IntermediateCaCertificate by id. Only the id identifier is required; delete() takes no other arguments.

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
resource.delete()

delete_cert_chain()

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.delete_cert_chain()
print(result)

download_attestation_statement()

Parameters:

Name	Type	Required	Description
stream	boolean	No	Pass False to buffer the streamed response in memory and return it as bytes; defaults to True, which returns a StreamingBody for chunked reads.

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.download_attestation_statement(stream=False)
print(result)

download_certificate_signing_request()

Parameters:

Name	Type	Required	Description
stream	boolean	No	Pass False to buffer the streamed response in memory and return it as bytes; defaults to True, which returns a StreamingBody for chunked reads.

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.download_certificate_signing_request(stream=False)
print(result)

download_hsm_public_key()

Parameters:

Name	Type	Required	Description
stream	boolean	No	Pass False to buffer the streamed response in memory and return it as bytes; defaults to True, which returns a StreamingBody for chunked reads.

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.download_hsm_public_key(stream=False)
print(result)

finalize_certificate()

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.finalize_certificate()
print(result)

generate_certificate_signing_request()

Parameters:

Name	Type	Required	Description
cert_id	integer	No	-
city	string	Yes	-
comm_name	string	Yes	-
country	string	Yes	-
csr_file_name	string	Yes	-
dept_name	string	Yes	-
key_size	integer	No	-
org_name	string	Yes	-
path_length_constraint	integer	No	-
signature_algorithm	string	No	-
state	string	Yes	-

Returns: CertCSR

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.generate_certificate_signing_request(city="value", comm_name="example-comm-name", country="value", csr_file_name="example-csr-file-name", dept_name="example-dept-name", org_name="example-org-name", state="value")
print(result)

generate_hsm_key_pair()

Returns: HsmKey

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.generate_hsm_key_pair()
print(result)

get_intermediate_ca_certificate_lite()

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.get_intermediate_ca_certificate_lite()
print(result)

make_default_certificate()

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.make_default_certificate()
print(result)

load()

Fetches an existing IntermediateCaCertificate by id. Only the id identifier is required; load() takes no other arguments.

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
resource.load()
print(resource.name)

show_certificate()

Returns: HsmCustomCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.show_certificate()
print(result)

show_certificate_signing_request()

Returns: CertSigningRequest

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.show_certificate_signing_request()
print(result)

update()

Updates an existing IntermediateCaCertificate. Call load() first, modify properties, then call update() — this method takes no arguments.

Properties for update:

Name	Type	Required	Description
cert_exp_date	long	No	-
cert_start_date	long	No	-
csr_file_name	string	No	-
csr_generation_time	integer	No	-
current_state	string	No	-
default_certificate	boolean	No	-
description	string	No	-
hsm_attestation_verified_time	integer	No	-
id	integer	Yes	-
key_generation_time	integer	No	-
name	string	No	-
public_key	string	No	-
region	string	No	-
status	string	No	-
type	string	No	-
uploaded_cert_chain_file_name	string	No	-
uploaded_cert_file_name	string	No	-

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
resource.load()
resource.name = "Updated value"
resource.update()

upload_cert()

Parameters:

Name	Type	Required	Description
file_upload	StreamingBody	No	-

Returns: IntermediateCaCertificate

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.upload_cert()
print(result)

verify_key_attestation()

Returns: HsmKeyAttestation

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.verify_key_attestation()
print(result)

upload_cert_chain()

Parameters:

Name	Type	Required	Description
file_upload	StreamingBody	No	-

Example:

resource = session.zia.IntermediateCaCertificate(id="your-resource-id")
result = resource.upload_cert_chain()
print(result)

Attributes

Name	Type	Required	Description
cert_exp_date	long	No	-
cert_start_date	long	No	-
csr_file_name	string	No	-
csr_generation_time	integer	No	-
current_state	string	No	-
default_certificate	boolean	No	-
description	string	No	-
hsm_attestation_verified_time	integer	No	-
id	integer	No	-
key_generation_time	integer	No	-
name	string	No	-
public_key	string	No	-
region	string	No	-
status	string	No	-
type	string	No	-
uploaded_cert_chain_file_name	string	No	-
uploaded_cert_file_name	string	No	-

Related

• IntermediateCaCertificate - Data structure definition
• Logging guide - enable verbose logs while debugging this resource