Upload a certificate to the MDM certificate repository. The certificate file must first be uploaded via the file upload API to obtain a file_id. Supports replacing existing certificates and optionally redistributing associated profiles.
post /api/v1/mdm/profiles/certificates
https://{serverurl}/api/v1/mdm/profiles/certificates
MDMOnDemand.MDMDeviceMgmt.CREATECopied!
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
File ID of the certificate file obtained from the file upload API
Password for the certificate. Required for identity certificates (.p12, .pfx). Maximum 250 characters
Type of certificate. Default 0 (CA uploaded certificate)
Certificate ID of an existing certificate to replace. When provided, the new certificate replaces the old one in all associated profiles. Obtain from the Get Certificates response
If true and old_certificate_id is provided, automatically redistributes profiles that used the old certificate. Default false
curl --request POST \
--url https://appdomain/api/v1/mdm/profiles/certificates \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'content-type: application/json' \
--data '{"certificate_file_upload":9210}'Upload a new CA certificate to the repository
{
"certificate_password": "mySecurePassword",
"certificate_type": 0,
"old_certificate_id": 0,
"certificate_file_upload": 9210,
"redistribute_profiles": false
}
Replace an existing certificate and redistribute associated profiles
{
"certificate_password": "newPassword",
"certificate_type": 0,
"old_certificate_id": 9007199254741000,
"certificate_file_upload": 9211,
"redistribute_profiles": true
}
Unique identifier of the newly created certificate
Display name of the certificate (extracted from the certificate CN)
Serial number of the certificate
Full Subject Distinguished Name
Full Issuer Distinguished Name
Certificate validity start time in Unix milliseconds
Certificate expiry time in Unix milliseconds
Organization name of the issuer
Common Name (CN) of the issuer
Number of days until certificate expiry
Certificate successfully uploaded with parsed details
{
"certificate_id": 9007199254740996,
"certificate_issuer_dn": "C=US,O=Apple Inc.,OU=Apple Certification Authority,CN=Apple Application Integration 2 Certification Authority",
"days_to_expire": 364,
"issuer_org": "Apple Inc.",
"certificate_notbefore": "1542767387054",
"certificate_subject_dn": "C=US, CN=APSP:dee10de6-00c5-4860-b6ec-3ed5ca4a8b3a, UID=com.apple.mgmt.External.dee10de6-00c5-4860-b6ec-3ed5ca4a8b3a",
"certificate_name": "APSP:dee10de6-00c5-4860-b6ec-3ed5ca4a8b3a",
"certificate_serial_number": "3977386725918465264",
"certificate_notafter": "1574303387054",
"issuer_name": "Apple Application Integration 2 Certification Authority"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.