Reset Database Certificates

POST

databases

{id}

credentials

certificate

reset

Reset Database Certificates

curl --request POST \
  --url https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "response": {
    "pem": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "crt": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----\nMIIE...\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "p12": "MIIJqQIBAzCCCW8GCSqGSIb3DQEHAaCCCWAEgglc...",
    "restart_required": false,
    "apps_to_restart": []
  }
}

string

required

The ID of the database to reset certificates for.

Response

object

The new certificate details for the database.

Show Toggle object

string

The new PEM certificate.

string

The new CRT certificate.

string

The new private key for the certificate.

string

The CA certificate (PEM) that signs the database server certificate. Absent on older databases.

string

The new client identity as PKCS#12, encoded in base64, with an empty password. Absent on older databases.

boolean

true when at least one application of a connected stack must restart to read the new certificates.

string[]

The IDs of those applications. Empty when restart_required is false.

{
  "response": {
    "pem": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "crt": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----\nMIIE...\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "p12": "MIIJqQIBAzCCCW8GCSqGSIb3DQEHAaCCCWAEgglc...",
    "restart_required": false,
    "apps_to_restart": []
  }
}

Error Responses

string

The error code indicating the reason for failure. Possible values:

AUTH_TOKEN_MISSING, API_KEY_INVALID, SESSION_REVOKED: The Authorization header is missing, the API key is invalid, or the dashboard session was revoked (401).
API_KEY_IP_DENIED, API_KEY_SCOPE_DENIED: The API key is used from an IP outside its allowlist, or it lacks the scope the route requires (403).
ACCESS_DENIED: The resource belongs to another account, or you lack the workspace permission for it (403).
DATABASE_NOT_FOUND_OR_FORBIDDEN: The specified database does not exist or the user lacks access.
FAILED_TO_RESET_CERTIFICATES: Failed to reset the certificates.

string

A descriptive message providing additional details about the error.

{
  "code": "ACCESS_DENIED"
}

{
  "code": "DATABASE_NOT_FOUND_OR_FORBIDDEN"
}

{
  "code": "FAILED_TO_RESET_CERTIFICATES"
}

Last modified on October 28, 2026

Reset Database Certificates

curl --request POST \
  --url https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vertracloud.app/v1/databases/{id}/credentials/certificate/reset"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "response": {
    "pem": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "crt": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----\nMIIE...\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIID...\n-----END CERTIFICATE-----",
    "p12": "MIIJqQIBAzCCCW8GCSqGSIb3DQEHAaCCCWAEgglc...",
    "restart_required": false,
    "apps_to_restart": []
  }
}

Overview

Endpoints

Reset Database Certificates

Response

Error Responses

​Response

​Error Responses

Response

Error Responses