EnrollmentCert

Enrollment Cert resource for Zscaler Private Access V1.

Resource operations

This resource supports the following standard methods: create(), load(), update(), delete(). They operate on the instance state — set properties with dot notation, then call the method with no arguments. Any other action listed below is a custom action that takes explicit keyword arguments and returns a value.

Quick Start

import zssdk
import logging

# Enable debug logging for EnrollmentCert
logging.getLogger('zssdk.zpa').setLevel(logging.DEBUG)
logging.basicConfig(level=logging.DEBUG)

session = zssdk.Session(
    vanity_domain="your-vanity-domain",
    client_id="your-client-id",
    client_secret="your-client-secret",
)

# Get a specific EnrollmentCert
resource = session.zpa.EnrollmentCert(id="your-resource-id")
resource.load()
print(resource)

# Debug output shows HTTP request/response details

Identifiers

Name	Type	Description
`id`	string	Unique identifier

Actions

create()

Creates a new EnrollmentCert. Set properties on the resource instance, then call create() — this method takes no arguments.

Properties for creation:

Name	Type	Required	Description
`customer_id`	long	No	-
`id`	long	No	-
`modified_time`	integer	No	-
`creation_time`	integer	No	-
`modified_by`	long	No	-
`microtenant_id`	long	No	-
`getc_name`	string	No	-
`valid_from_in_epoch_sec`	long	No	-
`valid_to_in_epoch_sec`	long	No	-
`certificate`	string	Yes	-
`issued_to`	string	No	-
`issued_by`	string	No	-
`serial_no`	string	No	-
`description`	string	No	-
`name`	string	Yes	-
`private_key`	string	No	-
`zrsaencryptedprivatekey`	string	No	-
`zrsaencryptedsessionkey`	string	No	-
`allow_signing`	boolean	No	-
`parent_cert_id`	long	No	-
`parent_cert_name`	string	No	-
`private_key_present`	boolean	No	-
`client_cert_type`	string	No	-
`csr`	string	No	-
`read_only`	boolean	No	-
`zscaler_managed`	boolean	No	-

Returns: EnrollmentCert

Example:

resource = session.zpa.EnrollmentCert()
resource.certificate = "value"
resource.name = "example-name"
resource.create()
print(f"Created with ID: {resource.id}")

create_CSR_for_CA_cert()

Parameters:

Name	Type	Required	Description
`customer_id`	long	No	-
`name`	string	Yes	-
`description`	string	No	-

Returns: EnrollmentCert

Example:

resource = session.zpa.EnrollmentCert()
result = resource.create_CSR_for_CA_cert(name="example-name")
print(result)

create_self_signed_enrollment_cert()

Parameters:

Name	Type	Required	Description
`customer_id`	long	No	-
`name`	string	Yes	-
`valid_from_in_epoch_sec`	long	No	-
`valid_to_in_epoch_sec`	long	No	-
`description`	string	No	-
`root_certificate_id`	string	No	-
`microtenant_id`	long	No	-

Returns: EnrollmentCert

Example:

resource = session.zpa.EnrollmentCert()
result = resource.create_self_signed_enrollment_cert(name="example-name")
print(result)

delete()

Deletes a EnrollmentCert by id. Only the id identifier is required; delete() takes no other arguments.

Example:

resource = session.zpa.EnrollmentCert(id="your-resource-id")
resource.delete()

load()

Fetches an existing EnrollmentCert by id. Only the id identifier is required; load() takes no other arguments.

Returns: EnrollmentCert

Example:

resource = session.zpa.EnrollmentCert(id="your-resource-id")
resource.load()
print(resource.name)

update()

Updates an existing EnrollmentCert. Call load() first, modify properties, then call update() — this method takes no arguments.

Properties for update:

Name	Type	Required	Description
`customer_id`	long	No	-
`id`	long	No	-
`modified_time`	integer	No	-
`creation_time`	integer	No	-
`modified_by`	long	No	-
`microtenant_id`	long	No	-
`getc_name`	string	No	-
`valid_from_in_epoch_sec`	long	No	-
`valid_to_in_epoch_sec`	long	No	-
`certificate`	string	Yes	-
`issued_to`	string	No	-
`issued_by`	string	No	-
`serial_no`	string	No	-
`description`	string	No	-
`name`	string	Yes	-
`private_key`	string	No	-
`zrsaencryptedprivatekey`	string	No	-
`zrsaencryptedsessionkey`	string	No	-
`allow_signing`	boolean	No	-
`parent_cert_id`	long	No	-
`parent_cert_name`	string	No	-
`private_key_present`	boolean	No	-
`client_cert_type`	string	No	-
`csr`	string	No	-
`read_only`	boolean	No	-
`zscaler_managed`	boolean	No	-

Example:

resource = session.zpa.EnrollmentCert(id="your-resource-id")
resource.load()
resource.name = "Updated value"
resource.update()

Attributes

Name	Type	Required	Description
`id`	long	No	-
`modified_time`	integer	No	-
`creation_time`	integer	No	-
`modified_by`	long	No	-
`microtenant_id`	long	No	-
`getc_name`	string	No	-
`valid_from_in_epoch_sec`	long	No	-
`valid_to_in_epoch_sec`	long	No	-
`certificate`	string	Yes	-
`issued_to`	string	No	-
`issued_by`	string	No	-
`serial_no`	string	No	-
`description`	string	No	-
`name`	string	Yes	-
`private_key`	string	No	-
`zrsaencryptedprivatekey`	string	No	-
`zrsaencryptedsessionkey`	string	No	-
`allow_signing`	boolean	No	-
`parent_cert_id`	long	No	-
`parent_cert_name`	string	No	-
`private_key_present`	boolean	No	-
`client_cert_type`	string	No	-
`csr`	string	No	-
`read_only`	boolean	No	-
`store_in_hsm`	boolean	No	-
`zscaler_managed`	boolean	No	-

EnrollmentCert - Data structure definition
Logging guide - enable verbose logs while debugging this resource

Quick Start​

Identifiers​

Actions​

create()​

create_CSR_for_CA_cert()​

create_self_signed_enrollment_cert()​

delete()​

load()​

update()​

Attributes​

Related​

Quick Start

Identifiers

Actions

create()

create_CSR_for_CA_cert()

create_self_signed_enrollment_cert()

delete()

load()

update()

Attributes

Related