---
title: "PATCH /api/v1/pki/syncs/palo-alto-networks/{pkiSyncId}"
method: PATCH
path: "/api/v1/pki/syncs/palo-alto-networks/{pkiSyncId}"
tags: ["PKI Syncs"]
---

# PATCH /api/v1/pki/syncs/palo-alto-networks/{pkiSyncId}

`PATCH /api/v1/pki/syncs/palo-alto-networks/{pkiSyncId}`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/pki/syncs/palo-alto-networks/{pkiSyncId}`
- Auth: none declared

Update the specified Palo Alto Networks PKI Sync.

## Path parameters

- `pkiSyncId` string, required

## Request body

- object
  - `name` string
  - `description` string
  - `isAutoSyncEnabled` boolean
  - `destinationConfig` object
    - `template` string: The Panorama template to store certificates in. Required when the connection points to a Panorama, and not allowed for a firewall.
    - `pushToDevices` boolean: Whether to push every template stack that contains the template to its firewalls after a commit. Applies to Panorama only.
  - `syncOptions` object
    - `canRemoveCertificates` boolean
    - `includeRootCa` boolean
    - `preserveItemOnRenewal` boolean
    - `healthCheckCommand` string, nullable
    - `postSyncCommand` string, nullable
    - `certificateNameSchema` string, required
  - `subscriberId` string, uuid, nullable
  - `connectionId` string, uuid
  - `filters` object, nullable: Replaces which of the Application's certificates this sync holds. Omit to leave them unchanged, or set to null to empty the sync.
    - `profileIds` string[]: Match certificates issued from any one of these certificate profiles.
    - `certificateOrderIds` string[]: Match any certificate belonging to any one of these certificate orders. An order groups a certificate with every renewal of it, so this keeps matching as the certificate is renewed.
    - `metadata` object[]: Match certificates carrying every one of these metadata pairs. Give a key on its own to match any value for that key.
      - `key` string, required: Metadata key the certificate must carry.
      - `value` string: Metadata value the key must have. Omit it to match any value.
  - `removalOptions` object

## Response `200`

Default Response

- object
  - `id` string, uuid, required
  - `name` string, required
  - `description` string, nullable
  - `destination` 'palo-alto-networks', required
  - `isAutoSyncEnabled` boolean, required
  - `destinationConfig` object, required
    - `template` string: The Panorama template to store certificates in. Required when the connection points to a Panorama, and not allowed for a firewall.
    - `pushToDevices` boolean: Whether to push every template stack that contains the template to its firewalls after a commit. Applies to Panorama only.
  - `syncOptions` object, required
    - `canRemoveCertificates` boolean
    - `includeRootCa` boolean
    - `preserveItemOnRenewal` boolean
    - `healthCheckCommand` string, nullable
    - `postSyncCommand` string, nullable
    - `certificateNameSchema` string, required
  - `projectId` string, uuid, required
  - `subscriberId` string, uuid, nullable
  - `connectionId` string, uuid, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `syncStatus` string, nullable
  - `lastSyncedAt` string, date-time, nullable
  - `lastHealthCheckRanAt` string, date-time, nullable
  - `lastHealthCheckStatus` 'pending' | 'running' | 'succeeded' | 'failed', nullable
  - `lastHealthCheckMessage` string, nullable
  - `filters` object, nullable: Which of the Application's certificates this sync holds. A certificate must match every field that is set, and a sync with no filters holds nothing.
    - `profileIds` string[]
    - `certificateOrderIds` string[]
    - `metadata` object[]
      - `key` string, required
      - `value` string

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-10-14** `f5b431b33c30`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/pki/syncs/palo-alto-networks/:pkiSyncId/patch.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)