---
title: "Sets the primary or secondary x509 certificate of an enrollment group"
method: PUT
path: "/enrollmentGroups/{enrollmentGroupId}/certificates/{entry}"
---

# Sets the primary or secondary x509 certificate of an enrollment group

`PUT /enrollmentGroups/{enrollmentGroupId}/certificates/{entry}`

Sets the primary or secondary x509 certificate of an enrollment group.

## Path parameters

- `enrollmentGroupId` string, required
- `entry` 'primary' | 'secondary', required

## Query parameters

- `api-version` string, required

## Request body

- SigningX509Certificate — The X509 certificate definition.
  - `verified` boolean — Whether the certificate has been verified.
  - `certificate` string — The string representation of this certificate.
  - `info` X509CertificateInfo — The X509 certificate info.
    - `sha1Thumbprint` string, required — The SHA-1 hash value of the certificate.
  - `etag` string — ETag used to prevent conflict across multiple updates

## Response `200`

Success

- SigningX509Certificate — The X509 certificate definition.
  - `verified` boolean — Whether the certificate has been verified.
  - `certificate` string — The string representation of this certificate.
  - `info` X509CertificateInfo — The X509 certificate info.
    - `sha1Thumbprint` string, required — The SHA-1 hash value of the certificate.
  - `etag` string — ETag used to prevent conflict across multiple updates

## Other responses

- `default` — An error response received from the IoT Central Service.

## Changes

- **2026-07-13** (1.0) `bcae1054dfc8` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/azure/apis/iotcentral-iotcentral/changes/enrollmentGroups/:enrollmentGroupId/certificates/:entry/put.md)

---

[API](https://skmtc.dev/azure/apis/iotcentral-iotcentral.md) · [All operations](https://skmtc.dev/azure/apis/iotcentral-iotcentral/llms.txt) · [OpenAPI document](https://skmtc.dev/azure/apis/iotcentral-iotcentral/revisions/565d8813cbd3?raw)