# Upload SSL certs to an A10 vThunder via axapi v3.0

**URL:** <https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509>\
**Category:** ADC - Application Delivery\
**Created:** [July 3, 2018, 5:25am UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509 "2018-07-03T05:25:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Leigh](https://avatars.discourse-cdn.com/v4/letter/l/71e660/32.png) [@Leigh](https://community.a10networks.com/u/Leigh)\
**Post date:** [July 3, 2018, 5:25am UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509/1 "2018-07-03T05:25:37Z")

</div>

Hi All,  
Can anybody tell me how to upload SSL Certs to an A10 vThunder via axapi 3.0? I want the certificate to be in the payload of the request, rather than having it on a remote server, as I don’t want the A10 to be able to connect to outside servers.  
Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)\
**Post date:** [July 3, 2018, 2:43pm UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509/2 "2018-07-03T14:43:55Z")

</div>

Hi Leigh, Try these. Import certificate:

```auto
curl -X POST \
  https://192.168.0.153/axapi/v3/import \
  -H 'authorization: A10 61affb2fec3de67a5da205f921023b' \
  -H 'content-type: application/json' \
  -d '{
"import": {
  "ssl-cert": "sd-san.crt",
  "certificate-type":"pem",
  "overwrite":"1",
  "remote-file": "scp://admin:password@192.168.0.18:/private/tftpboot/sd-san.crt",
  "use-mgmt-port": 1
  }
}'

```

Import certificate key:

```auto

curl -X POST \
  https://192.168.0.153/axapi/v3/import \
  -H 'authorization: A10 61affb2fec3de67a5da205f921023b' \
  -H 'content-type: application/json' \
  -d '{
"import": {
  "ssl-key": "sd-san.key",
  "overwrite":"1",
  "remote-file": "scp://admin:password@192.168.0.18:/private/tftpboot/sd-san.key",
  "use-mgmt-port": 1
  }
}'

```

---

<div class="post-metadata">

**Author:** ![Leigh](https://avatars.discourse-cdn.com/v4/letter/l/71e660/32.png) [@Leigh](https://community.a10networks.com/u/Leigh)\
**Post date:** [July 3, 2018, 10:46pm UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509/3 "2018-07-03T22:46:37Z")

</div>

The ‘remote-file’ part is the bit I didn’t want to do. I want to be able to upload the cert in the request, rather than specify a remote location.  
I don’t want our A10 to be able to scp from another server. (or tftp, or http, or whatever)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)\
**Post date:** [July 6, 2018, 7:46pm UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509/4 "2018-07-06T19:46:45Z")

</div>

You can also try with a POST to this URI: /axapi/v3/file/ssl-cert

```auto
\{
  "ssl-cert":\{

```

“file”:“certificate”,  
&nbsp;&nbsp;“certificate-type”:“pem”,  
&nbsp;&nbsp;“file-handle”:“certificate.pem”,  
&nbsp;&nbsp;“action”:“import”

```auto
  \}
\}

```

---

<div class="post-metadata">

**Author:** ![john\_allen](https://avatars.discourse-cdn.com/v4/letter/j/e19adc/32.png) [@john\_allen](https://community.a10networks.com/u/john_allen)\
**Post date:** [December 18, 2023, 8:16pm UTC](https://community.a10networks.com/t/upload-ssl-certs-to-an-a10-vthunder-via-axapi-v3-0/509/5 "2023-12-18T20:16:13Z")

</div>

In case anyone else gets to this post, the answer is over in another very similar question:  
[https://community.a10networks.com/discussion/16789/upload-ssl-certs-via-axapi-v3-0](https://community.a10networks.com/discussion/16789/upload-ssl-certs-via-axapi-v3-0)