---
title: "POST /target-update-digicert"
method: POST
path: "/target-update-digicert"
tags: ["Targets"]
---

# POST /target-update-digicert

`POST /target-update-digicert`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/target-update-digicert`
- Auth: none declared

## Request body

- TargetUpdateDigiCert: targetUpdateDigiCert is a command that updates an existing DigiCert target
  - `acme-challenge` string: ACME challenge type. Options: [dns]
  - `delete_protection` string: Protection from accidental deletion of this object [true/false]
  - `description` string: Description of the object
  - `digicert-url` string: DigiCert ACME endpoint selector. Options: [us-production/eu-production/us-demo/eu-demo]
  - `dns-propagation-wait` string: Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only
  - `dns-resolvers` string[]: Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only
  - `dns-skip-precheck` boolean: Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only
  - `dns-target-creds` string: Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare
  - `dns-timeout` string: Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only
  - `dns-zone` string: Cloudflare DNS zone identifier. Required when DNS credentials target is Cloudflare
  - `eab-hmac-key` string: External Account Binding HMAC key (required for ACME account bootstrap on create)
  - `eab-key-id` string: External Account Binding key identifier (required for ACME account bootstrap on create)
  - `email` string, required: Email address for ACME account registration
  - `gcp-project` string: GCP Cloud DNS project ID. Optional and can be derived from service account
  - `hosted-zone` string: AWS Route53 hosted zone ID. Required when DNS credentials target is AWS
  - `json` boolean: Set output format to JSON
  - `keep-prev-version` string: Whether to keep previous version [true/false]. If not set, use default according to account settings
  - `key` string: The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used)
  - `lock-on-read` string: Lock this secret after each successful value read
  - `lock-ttl` string: Lock TTL in minutes
  - `max-versions` string: Set the maximum number of versions, limited by the account settings defaults.
  - `name` string, required: Target name
  - `new-name` string: New target name
  - `resource-group` string: Azure resource group name. Required when DNS credentials target is Azure
  - `rotate-on-unlock` string: Rotate this secret after it is unlocked
  - `timeout` string: Timeout for challenge validation
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication

## Response `201`

targetUpdateDigiCertResponse wraps response body.

- TargetUpdateOutput
  - `target_id` integer

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/infrastructure-connectivity.md) - [All operations](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/revisions/62dc62fea89d?raw)