---
title: "Update TLS Trust Bundle"
method: PUT
path: "/v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}"
tags: ["Event Gateway TLS Trust Bundles"]
---

# Update TLS Trust Bundle

`PUT /v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v1/event-gateways/{gatewayId}/tls-trust-bundles/{tlsTrustBundleId}`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Updates an existing TLS trust bundle.

**Requires a minimum runtime version of `1.1`**.

## Request body

- object
  - `name` string: The unique name of the TLS trust bundle.
  - `description` string: A human-readable description of the TLS trust bundle.
  - `config` TLSTrustBundleConfig
    - `trusted_ca` string, required: PEM-encoded list of trusted CA certificates used to verify client certificates. Can be a literal PEM string or a vault reference.
  - `labels` Labels: Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

## Response `200`

Updated TLS trust bundle object.

- TLSTrustBundle: A TLS trust bundle defines a set of trusted certificate authorities (CAs) used for client certificate verification during mutual TLS (mTLS). Trust bundles are referenced by TLS listener policies to determine which client certificates are accepted. **Requires a minimum runtime version of `1.1`**.
  - `id` string, uuid, required: The unique identifier of the TLS trust bundle.
  - `name` string, required: The unique name of the TLS trust bundle.
  - `description` string: A human-readable description of the TLS trust bundle.
  - `config` TLSTrustBundleConfig, required
    - `trusted_ca` string, required: PEM-encoded list of trusted CA certificates used to verify client certificates. Can be a literal PEM string or a vault reference.
  - `labels` Labels: Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `created_at` string, date-time, required: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required: An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden

## Changes

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
  - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400`
  - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
  - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2026-09-25** `68d43091b84d`: 2 warning
  - added the new `400.00` enum value to the `status` response property for the response status `400`
  - added the new `403.00` enum value to the `status` response property for the response status `403`
- **2026-09-18** `f324fb7610e4`: 2 breaking, 18 info
  - the response's body type changed from no type to `object` for status `400`
  - the response's body type changed from no type to `object` for status `403`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `400`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `401`
  - …16 more
- **2026-03-30** `6dabb1df19ab`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v1/event-gateways/:gatewayId/tls-trust-bundles/:tlsTrustBundleId/put.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)