Is there a way to export all the certificates present via the API?

hcb.pedro — Wed, 07 May 2025 18:48:36 GMT

Is it possible to export all Certificates at once from a Palo Alto Firewall via API? Without having to pass the names of the certificates from the API call, because in the documentation I've only seen it possible that way.

Re: Is there a way to export all the certificates present via the API?

kiwi — Thu, 08 May 2025 12:29:26 GMT

Hi @hcb.pedro ,

I don't think it's possible out of the box.

The API also mentions that the following parameters are required to export the certificates:

Parameters "certificate-name", "format", "include-key" are required while exporting certificate.

As a workaround you can get the list of all the certificates using the API call:

XML API Url /api/?type=config&action=get&xpath=/config/shared/certificate

Then you can parse the XML response to extract each certificate name and loop through them and export one-by-one using the export API.

Kind regards,

-Kim.

topic Re: Is there a way to export all the certificates present via the API? in General Topics

Is there a way to export all the certificates present via the API?

Re: Is there a way to export all the certificates present via the API?