Set a tenant's TSA connection override (platform, blind-provisioning)

put

https://staging.ankatech.co/api/v3/admin/platform/tenants/{tenantId}/settings/timestamping/override

Seals the tenant's OPTIONAL TSA client credential under KEK_SECRETTENANT

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

tenantId

uuid

required

Body Params

Per-tenant TSA connection override (ROOT-gated, whole-connection all-or-nothing).

tsaEnabled

boolean

required

tsaEndpointUrl

string

required

length between 0 and 2048

Absolute https:// URL of the RFC 3161 time-stamping authority. Loopback, private, link-local/cloud-metadata, inline-credential and non-https forms are always rejected (SSRF guard).

tsaPolicyOid

string

^([0-9]+\.)+[0-9]+$

Requested TSA policy OID (dotted-decimal); optional.

tsaHashAlgorithm

string

^SHA-256$

Message-imprint digest algorithm; SHA-256 only.

tsaTimeoutMs

int32

100 to 60000

TSA request round-trip timeout in milliseconds; 100-60000.

tsaClientCredential

string

length between 0 and 8192

Write-only TSA client credential; optional (anonymous TSA is valid).

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

Language

Credentials

Bearer

JWT

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200Override applied (credential masked ••••••).

400Invalid input (the mask sentinel supplied as a credential, or a TSA endpoint URL that is not permitted: loopback, link-local/cloud-metadata, private-range host, an obfuscated numeric IP form, an inline-credential authority, or a non-https scheme).

401Missing or invalid JWT.

403Not the platform tenant or missing scope.

404Tenant not found (oracle-safe).

422Setting is not tenant-overridable.

500Unexpected server error.