---
title: "Create or update a domain's high-assurance policy"
method: PUT
path: "/v1/high-assurance/policies/{domain}"
tags: ["high-assurance"]
---

# Create or update a domain's high-assurance policy

`PUT /v1/high-assurance/policies/{domain}`

## Request

- Base URL: `https://api.ctindex.io`
- URL: `https://api.ctindex.io/v1/high-assurance/policies/{domain}`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

## Path parameters

- `domain` string, required

## Cookies

- `ctix_session` string, nullable

## Request body

- HighAssurancePolicyUpsert: Request body for PUT /v1/high-assurance/policies/{domain}. Declares (or updates) the per-domain high-assurance posture: whether unknown certificates open a case, the default case severity, the escalation window, and whether the CAA policy check runs. All fields are optional on update so a caller can toggle a single knob.
  - `enabled` boolean, nullable
  - `default_severity` string, nullable
  - `escalation_window_minutes` integer, nullable
  - `caa_check_enabled` boolean, nullable

## Response `200`

Successful Response

- HighAssurancePolicyResponse
  - `id` string, uuid, required
  - `domain` string, required
  - `enabled` boolean
  - `default_severity` string
  - `escalation_window_minutes` integer
  - `caa_check_enabled` boolean
  - `created_at` string, date-time, nullable
  - `updated_at` string, date-time, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ctindex/apis/certindex-api.md) · [All operations](https://skmtc.dev/ctindex/apis/certindex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ctindex/apis/certindex-api/revisions/d5bc0ec85bc9?raw)