Get metadata of the server TLS certificate

GET 
/config/server/certificate

WARNING: This endpoint manages the TLS certificate of the Netwrix Privilege Secure for Discovery server itself.

Changing it can interrupt access to the console and API. Returns metadata about the current (and previous, if any) server TLS certificate. The private key and the certificate PEM are never returned. HTTP 404 with an empty body means no certificate has been uploaded. Required role: admin or superadmin.

Responses

200

Certificate metadata.

401

No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.

403

The token's role is not allowed for this operation, or the token's scopes exclude the route (Scope not allowed by token).

404

No server certificate has been stored. The body is empty (Content-Type is still application/json).