Upload or rotate the Dataprev client certificate
Stores (or rotates) the tenant’s ICP-Brasil A1 client certificate (PEM cert+key) for the Dataprev rail in the tenant secret store and upserts non-secret metadata. The certificate is validated before storage. The response NEVER carries secret material.
Authorizations
JWT bearer token issued by the identity provider.
Body
Response
OK
Whether a client certificate is stored for the tenant.
Whether OAuth2 client_credentials are stored for the tenant.
External rail the credentials belong to.
"dataprev"
Last-update timestamp (RFC 3339, UTC).
"2026-06-23T12:00:00Z"
SHA-256 hex fingerprint of the stored certificate (absent when none).
"3b1f...c0"
RFC 3339 cert expiry (UTC); absent when no cert is stored.
"2027-01-01T00:00:00Z"

