---
title: "Keystore enrollment"
method: POST
path: "/v1/certificate/enrollkeystore"
tags: ["v1/certificate"]
---

# Keystore enrollment

`POST /v1/certificate/enrollkeystore`

Creates a keystore for the specified end entity

## Request body

- KeyStoreRestRequest
  - `username` string — Username
  - `password` string — Password
  - `key_alg` string — Key algorithm used for enrollment
  - `key_spec` string — Key specification to use

## Response `200`

Successful operation

- CertificateEnrollmentRestResponse
  - `certificate` string, byte — Certificate
  - `serial_number` string — Hex Serial Number
  - `response_format` string — Response format
  - `certificate_chain` string[] — CA Certificate chain

## Changes

- **2025-03-11** `4045b1bab09f` — 1 breaking, 1 info
  - removed the success response with the status `201`
  - added the success response with the status `200`
- **2025-03-11** `37878df36b77` — 1 breaking, 1 info
  - removed the success response with the status `200`
  - added the success response with the status `201`
- **2025-01-24** `d0f3affe7c3c` — 1 breaking, 1 info
  - removed the success response with the status `201`
  - added the success response with the status `200`
- **2024-07-05** `b6fc2ad168e5` — 1 breaking, 1 info
  - removed the success response with the status `200`
  - added the success response with the status `201`

[Change history](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface/changes/v1/certificate/enrollkeystore/post.md)

---

[API](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface.md) · [All operations](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/keyfactor/ejbca-rest-interface/revisions/44f8798658e2/schema)