Skip to content

Makes the named key the one new licenses and offline envelopes are signed with. Tokens already issued keep validating against the key that signed them until that key is retired.

POST
/api/v1/provision/admin/providers/license-signing-keys/{keyId}/promote
curl --request POST \
--url https://example.com/api/v1/provision/admin/providers/license-signing-keys/example/promote
keyId
required
string

OK

Public half of the provider’s license-signing keypair. Vendors embed string LicenseSigningKeyDto.PublicKey in their application so the license consumer SDK can verify license token signatures offline.

object
keyId
string
publicKey

Base64-encoded (PKCS#1) RSA public key.

string
isDefault

Whether new licenses and offline envelopes are currently signed with this key.

boolean
createdAt

When the key was published.

string format: date-time
expirationDate

When the key stops verifying anything it signed, if an expiry was set.

null | string format: date-time
name

Operator-facing label, to tell keys apart during a rotation.

string

Forbidden

object
type
null | string
title
null | string
status
null | integer | string format: int32
/^-?(?:0|[1-9]\d*)$/
detail
null | string
instance
null | string

Not Found

object
type
null | string
title
null | string
status
null | integer | string format: int32
/^-?(?:0|[1-9]\d*)$/
detail
null | string
instance
null | string