---
title: "GET /v1/customers/{customersId}/certificateProvisioningProcesses/{certificateProvisioningProcessesId}"
method: GET
path: "/v1/customers/{customersId}/certificateProvisioningProcesses/{certificateProvisioningProcessesId}"
tags: ["customers"]
---

# GET /v1/customers/{customersId}/certificateProvisioningProcesses/{certificateProvisioningProcessesId}

`GET /v1/customers/{customersId}/certificateProvisioningProcesses/{certificateProvisioningProcessesId}`

## Request

- Base URL: `https://chromemanagement.googleapis.com`
- URL: `https://chromemanagement.googleapis.com/v1/customers/{customersId}/certificateProvisioningProcesses/{certificateProvisioningProcessesId}`
- Auth: none declared

Retrieves a certificate provisioning process.

## Path parameters

- `customersId` string, required
- `certificateProvisioningProcessesId` string, required

## Response `200`

Successful response

- GoogleChromeManagementVersionsV1CertificateProvisioningProcess: A certificate provisioning process.
  - `chromeOsDevice` GoogleChromeManagementVersionsV1ChromeOsDevice: Describes the ChromeOS device that a `CertificateProvisioningProcess` belongs to.
    - `deviceDirectoryApiId` string: Output only. The unique Directory API ID of the device. This value is the same as the Admin Console's Directory API ID in the ChromeOS Devices tab.
    - `serialNumber` string: Output only. Device serial number. This value is the same as the Admin Console's Serial Number in the ChromeOS Devices tab.
  - `chromeOsUserSession` GoogleChromeManagementVersionsV1ChromeOsUserSession: Describes the ChromeOS user session that a `CertificateProvisioningProcess` belongs to.
    - `chromeOsDevice` GoogleChromeManagementVersionsV1ChromeOsDevice: Describes the ChromeOS device that a `CertificateProvisioningProcess` belongs to.
      - `deviceDirectoryApiId` string: Output only. The unique Directory API ID of the device. This value is the same as the Admin Console's Directory API ID in the ChromeOS Devices tab.
      - `serialNumber` string: Output only. Device serial number. This value is the same as the Admin Console's Serial Number in the ChromeOS Devices tab.
    - `userDirectoryApiId` string: Output only. The unique Directory API ID of the user.
    - `userPrimaryEmail` string: Output only. The primary e-mail address of the user.
  - `failureMessage` string: Output only. A message describing why this `CertificateProvisioningProcess` has failed. Presence of this field indicates that the `CertificateProvisioningProcess` has failed.
  - `genericCaConnection` GoogleChromeManagementVersionsV1GenericCaConnection: Describes a generic Certificate Authority Connection.
    - `caConnectionAdapterConfigReference` string: Output only. A string that references the administrator-provided configuration for the certification authority service.
  - `genericProfile` GoogleChromeManagementVersionsV1GenericProfile: Describes a generic certificate provisioning profile.
    - `profileAdapterConfigReference` string: Output only. A string that references the administrator-provided configuration for the certificate provisioning profile.
  - `issuedCertificate` string: Output only. The issued certificate for this `CertificateProvisioningProcess` in PEM format.
  - `name` string: Identifier. Resource name of the `CertificateProvisioningProcess`. The name pattern is given as `customers/{customer}/certificateProvisioningProcesses/{certificate_provisioning_process}` with `{customer}` being the obfuscated customer id and `{certificate_provisioning_process}` being the certificate provisioning process id.
  - `provisioningProfileId` string: Output only. The ID of the certificate provisioning profile.
  - `scepCaConnection` GoogleChromeManagementVersionsV1ScepCaConnection: Describes a SCEP Certificate Authority Connection.
    - `caConnectionAdapterConfigReference` string: Output only. A string that references the administrator-provided configuration for the certification authority service.
  - `scepProfile` GoogleChromeManagementVersionsV1ScepProfile: Describes a SCEP certificate provisioning profile.
    - `certificateTemplateName` string: Output only. The certificate template name as defined by the admin on their on-prem infrastructure. The Certificate Authority uses this name to identify the certificate template.
    - `country` string: Output only. The country of the subject.
    - `keyUsages` string[]: Output only. The allowed key usages for certificate's key.
    - `locality` string: Output only. The locality of the subject.
    - `organization` string: Output only. The name of the organization the subject belongs to.
    - `organizationalUnits` string[]: Output only. The organizational units of the subject.
    - `state` string: Output only. The state of the subject.
    - `subjectAltNames` GoogleChromeManagementVersionsV1SubjectAltName[]: Output only. The subject alternative names.
      - `type` 'SUBJECT_ALT_NAME_TYPE_UNSPECIFIED' | 'RFC822_NAME' | 'DNS_NAME' | 'OTHER_NAME_USER_PRINCIPAL_NAME' | 'UNIFORM_RESOURCE_IDENTIFIER': Output only. The type of the SubjectAltName extension.
      - `value` string: Output only. The value of the subject alternative name with respect to the `type`.
    - `subjectCommonName` string: Output only. The common name of the subject.
  - `signData` string, byte: Output only. The data that the client was asked to sign. This field is only present after the `SignData` operation has been initiated.
  - `signature` string, byte: Output only. The signature of `signature_algorithm`, generated using the client's private key using `signature_algorithm`. This field is only present after the `SignData` operation has finished.
  - `signatureAlgorithm` 'SIGNATURE_ALGORITHM_UNSPECIFIED' | 'SIGNATURE_ALGORITHM_RSA_PKCS1_V1_5_SHA256' | 'SIGNATURE_ALGORITHM_ECDSA_SHA256': Output only. The signature algorithm that the client and backend components use when processing `sign_data`. If the `profile_type` is a `GenericProfile`, this field will only be present after the `SignData` operation was initiated. If the `profile_type` is a `ScepProfile`, the field will always be present.
  - `startTime` string, google-datetime: Output only. Server-generated timestamp of when the certificate provisioning process has been created.
  - `subjectPublicKeyInfo` string, byte: Output only. The public key for which a certificate should be provisioned. Represented as a DER-encoded X.509 SubjectPublicKeyInfo.

---

[API](https://skmtc.dev/google/apis/chromemanagement.md) - [All operations](https://skmtc.dev/google/apis/chromemanagement/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/chromemanagement/revisions/872a15abbbd0?raw)