Is there a way to export all the certificates present via the API?

[hcb.pedro]

Is it possible to export all Certificates at once from a Palo Alto Firewall via API? Without having to pass the names of the certificates from the API call, because in the documentation I've only seen it possible that way.

[kiwi]

Hi @hcb.pedro ,

I don't think it's possible out of the box.

The API also mentions that the following parameters are required to export the certificates:

Parameters "certificate-name", "format", "include-key" are required while exporting certificate.

As a workaround you can get the list of all the certificates using the API call:

XML API Url
/api/?type=config&action=get&xpath=/config/shared/certificate

Then you can parse the XML response to extract each certificate name and loop through them and export one-by-one using the export API.

Kind regards,

-Kim.