Skip to main content
POST
Complete a BYOK Model-A signing-key import (SaaS)

Autorizações

Authorization
string
header
obrigatório

JWT bearer token issued by the identity provider.

Cabeçalhos

X-Idempotency
string
obrigatório

Idempotency key for safe retries (MANDATORY on this high-sensitivity endpoint).

Exemplo:

"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

Corpo

application/json
encryptedKeyMaterialBase64
string
obrigatório

Base64-encoded wrapped private-key material (Model A — never cleartext).

Minimum string length: 1
importTokenBase64
string
obrigatório

Base64-encoded opaque KMS import token from the import-params step.

Minimum string length: 1
keyId
string
obrigatório

KMS key id returned by the import-params step.

Minimum string length: 1
Exemplo:

"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

participantIspb
string
obrigatório

Participant ISPB the certificate belongs to (8-character identifier).

Minimum string length: 1
Exemplo:

"29011780"

publicCertPem
string
obrigatório

PEM-encoded PUBLIC ICP-Brasil server-type certificate. Refused unless the key is RSA of at least 2048 bits and the certificate is valid right now (MAPX-OP106 §8.3.1 vii, §8.4).

Minimum string length: 1

Resposta

OK

certificateId
string
obrigatório

Stored public-certificate id.

Exemplo:

"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

kmsRef
string
obrigatório

Per-tenant KMS key reference.

Exemplo:

"arn:aws:kms:us-east-1:000000000000:key/018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

status
string
obrigatório

Import result status.

Exemplo:

"imported"