# Add a new Certificate payload configuration to an existing profile

To create Ios Certificate policy

## Endpoint

**POST** `/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy`

## Request URL

```
https://{serverurl}/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy
```

- `{serverurl}` – Refer to your OAuth authentication endpoint domain.

## Scope

```
MDMOnDemand.MDMDeviceMgmt.CREATE
```

## Header

```
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
```

## Request Parameters

### Path Parameters

- **profile_id** (string) — Mandatory  
  Unique identifier of the profile. Obtain from the [Create Profile](https://www.manageengine.com/mobile-device-management/help/api/cloud/profiles-create-profile.html) or [Get Profiles](https://www.manageengine.com/mobile-device-management/help/api/cloud/profiles-get-profile.html) response.

### Query Parameters

- **t** (long) — Optional  
- **ignoreHeader** (boolean) — Optional  
- **qlt** (long) — Optional  
- **previousTab** (string) — Optional  
- **service** (string) — Optional  
- **search** (string) — Optional  
  Free-text search string applied to the default searchable fields of the resource  
- **all** (boolean) — Optional  
- **dc_customerid** (long) — Optional  
- **mdm_instance** (string) — Optional  
- **signupsrc** (string) — Optional  
- **zaaid** (string) — Optional  
- **command** (string) — Optional  
- **orderby** (string) — Optional  
- **sortorder** (string) — Optional  
- **select_all** (boolean) — Optional  
  When true, applies the operation to every record matching the current filter rather than to specific IDs. Default: false  
- **zoho-internal** (boolean) — Optional  
- **dc_instance** (string) — Optional  
- **SUBREQUEST** (string) — Optional  
- **source** (string) — Optional  
- **nocache** (long) — Optional  
  Param to avoid being served from cache  
- **wms_csrparam** (string) — Optional  
  CSRF Token  

## Request Body

**Content-Type:** `application/json`  
**Type:** JSON object

### Attributes

- **certificate_id** (long) — Mandatory  
  Certificate ID obtained from the [Certificates API](https://www.manageengine.com/mobile-device-management/help/api/cloud/certificates-get-certificates.html).

- **allow_other_app_access** (boolean) — Optional  
  Allow Other App Access. Default: false

- **key_is_extractable** (boolean) — Optional  
  Key Is Extractable. Default: true

### Sample Request (Curl)

```bash
curl --request POST \
  --url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52' \
  --header 'content-type: application/json' \
  --data '{"certificate_id":1}'
```

### Sample Request (Java)

```java
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy"))
        .header("content-type", "application/json")
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("POST", HttpRequest.BodyPublishers.ofString("{\"certificate_id\":1}"))
        .build();

    HttpResponse<String> response = HttpClient.newHttpClient()
        .send(request, HttpResponse.BodyHandlers.ofString());

    System.out.println(response.body());
  }
}
```

### Sample Request (Python)

```python
import http.client

conn = http.client.HTTPSConnection("appdomain")

payload = "{\"certificate_id\":1}"

headers = {
    'content-type': "application/json",
    'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52"
}

conn.request("POST", "/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy", payload, headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))
```

### Sample Request (Deluge)

```javascript
headersMap = Map();
headersMap.put("Content-Type", "application/json");
headersMap.put("Accept", "application/json");

data = Map();
data.put("certificate_id","1");

response = invokeUrl
[
    url: "https://appDomain/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy"
    type: POST
    headers: headersMap
    body: data
    connection: connection_name
]

info response;
```

### Sample Request (PowerShell)

```powershell
$headers=@{}
$headers.Add("content-type", "application/json")
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/ioscertificatepolicy' -Method POST -Headers $headers -ContentType 'application/json' -Body '{"certificate_id":1}'
```

### Sample Request Body

```json
{
  "certificate_id": 1,
  "allow_other_app_access": false,
  "key_is_extractable": true
}
```

## Response Parameters

### HTTP 200

**Response Body:** `application/json`  
**Type:** JSON object

#### Attributes

- **payload_id** (long)  
  Unique identifier for the created payload item  

- **certificate_id** (long)  
  Certificate ID obtained from the [Certificates API](https://www.manageengine.com/mobile-device-management/help/api/cloud/certificates-get-certificates.html).

- **allow_other_app_access** (boolean)  
  Allow Other App Access. Default: false  

- **key_is_extractable** (boolean)  
  Key Is Extractable. Default: true  

### Sample Response (HTTP 200)

```json
{
  "certificate_id": 1,
  "payload_id": 9007199254741000,
  "allow_other_app_access": false,
  "key_is_extractable": true
}
```

## Possible Response Codes

- **200** — HTTP code

## Rate Limit

- **Duration:** 1 minute  
- **Threshold:** 30  
- **Lock period:** 5 minutes  

**Duration** – Time window for the threshold.  
**Threshold** – Number of API calls allowed within the specified duration.  
**Lock Period** – Wait time before consecutive API requests.