---
title: "Update TLS Trust Bundle"
method: PUT
path: "/v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}"
tags: ["Event Gateway TLS Trust Bundles"]
---

# Update TLS Trust Bundle

`PUT /v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Updates an existing TLS trust bundle.

**Requires a minimum runtime version of `1.1`**.

## Request body

- object
  - `name` string: The unique name of the TLS trust bundle.
  - `description` string: A human-readable description of the TLS trust bundle.
  - `config` TLSTrustBundleConfig
    - `trusted_ca` string, required: PEM-encoded list of trusted CA certificates used to verify client certificates. Can be a literal PEM string or a vault reference.
  - `labels` Labels: Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

## Response `200`

Updated TLS trust bundle object.

- TLSTrustBundle: A TLS trust bundle defines a set of trusted certificate authorities (CAs) used for client certificate verification during mutual TLS (mTLS). Trust bundles are referenced by TLS listener policies to determine which client certificates are accepted. **Requires a minimum runtime version of `1.1`**.
  - `id` string, uuid, required: The unique identifier of the TLS trust bundle.
  - `name` string, required: The unique name of the TLS trust bundle.
  - `description` string: A human-readable description of the TLS trust bundle.
  - `config` TLSTrustBundleConfig, required
    - `trusted_ca` string, required: PEM-encoded list of trusted CA certificates used to verify client certificates. Can be a literal PEM string or a vault reference.
  - `labels` Labels: Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `created_at` string, date-time, required: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required: An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden

## Changes

- **2026-03-27** `2322191a98f7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/kong/apis/konnect-api-beta/changes/v1/event-gateways/:gatewayId/tls-trust-bundles/:tlsTrustBundleId/put.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-beta.md) - [All operations](https://skmtc.dev/kong/apis/konnect-api-beta/llms.txt) - [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-beta/revisions/cef0f947e9c9?raw)