We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
Manages an IotHub Certificate.
Example Usage
using System;
using System.IO;
using Pulumi;
using Azure = Pulumi.Azure;
class MyStack : Stack
{
private static string ReadFileBase64(string path) {
return Convert.ToBase64String(Encoding.UTF8.GetBytes(File.ReadAllText(path)))
}
public MyStack()
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
{
Location = "West Europe",
});
var exampleIoTHub = new Azure.Iot.IoTHub("exampleIoTHub", new Azure.Iot.IoTHubArgs
{
ResourceGroupName = exampleResourceGroup.Name,
Location = exampleResourceGroup.Location,
Sku = new Azure.Iot.Inputs.IoTHubSkuArgs
{
Name = "B1",
Capacity = 1,
},
});
var exampleCertificate = new Azure.Iot.Certificate("exampleCertificate", new Azure.Iot.CertificateArgs
{
ResourceGroupName = exampleResourceGroup.Name,
IothubName = exampleIoTHub.Name,
IsVerified = true,
CertificateContent = ReadFileBase64("example.cer"),
});
}
}
package main
import (
"encoding/base64"
"io/ioutil"
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/iot"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func filebase64OrPanic(path string) pulumi.StringPtrInput {
if fileData, err := ioutil.ReadFile(path); err == nil {
return pulumi.String(base64.StdEncoding.EncodeToString(fileData[:]))
} else {
panic(err.Error())
}
}
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleIoTHub, err := iot.NewIoTHub(ctx, "exampleIoTHub", &iot.IoTHubArgs{
ResourceGroupName: exampleResourceGroup.Name,
Location: exampleResourceGroup.Location,
Sku: &iot.IoTHubSkuArgs{
Name: pulumi.String("B1"),
Capacity: pulumi.Int(1),
},
})
if err != nil {
return err
}
_, err = iot.NewCertificate(ctx, "exampleCertificate", &iot.CertificateArgs{
ResourceGroupName: exampleResourceGroup.Name,
IothubName: exampleIoTHub.Name,
IsVerified: pulumi.Bool(true),
CertificateContent: filebase64OrPanic("example.cer"),
})
if err != nil {
return err
}
return nil
})
}
Example coming soon!
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
import * from "fs";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleIoTHub = new azure.iot.IoTHub("exampleIoTHub", {
resourceGroupName: exampleResourceGroup.name,
location: exampleResourceGroup.location,
sku: {
name: "B1",
capacity: "1",
},
});
const exampleCertificate = new azure.iot.Certificate("exampleCertificate", {
resourceGroupName: exampleResourceGroup.name,
iothubName: exampleIoTHub.name,
isVerified: true,
certificateContent: Buffer.from(fs.readFileSync("example.cer"), 'binary').toString('base64'),
});
import pulumi
import base64
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_io_t_hub = azure.iot.IoTHub("exampleIoTHub",
resource_group_name=example_resource_group.name,
location=example_resource_group.location,
sku=azure.iot.IoTHubSkuArgs(
name="B1",
capacity=1,
))
example_certificate = azure.iot.Certificate("exampleCertificate",
resource_group_name=example_resource_group.name,
iothub_name=example_io_t_hub.name,
is_verified=True,
certificate_content=(lambda path: base64.b64encode(open(path).read().encode()).decode())("example.cer"))
Example coming soon!
Create Certificate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Certificate(name: string, args: CertificateArgs, opts?: CustomResourceOptions);@overload
def Certificate(resource_name: str,
args: CertificateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Certificate(resource_name: str,
opts: Optional[ResourceOptions] = None,
certificate_content: Optional[str] = None,
iothub_name: Optional[str] = None,
resource_group_name: Optional[str] = None,
is_verified: Optional[bool] = None,
name: Optional[str] = None)func NewCertificate(ctx *Context, name string, args CertificateArgs, opts ...ResourceOption) (*Certificate, error)public Certificate(string name, CertificateArgs args, CustomResourceOptions? opts = null)
public Certificate(String name, CertificateArgs args)
public Certificate(String name, CertificateArgs args, CustomResourceOptions options)
type: azure:iot:Certificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var examplecertificateResourceResourceFromIotcertificate = new Azure.Iot.Certificate("examplecertificateResourceResourceFromIotcertificate", new()
{
CertificateContent = "string",
IothubName = "string",
ResourceGroupName = "string",
IsVerified = false,
Name = "string",
});
example, err := iot.NewCertificate(ctx, "examplecertificateResourceResourceFromIotcertificate", &iot.CertificateArgs{
CertificateContent: pulumi.String("string"),
IothubName: pulumi.String("string"),
ResourceGroupName: pulumi.String("string"),
IsVerified: pulumi.Bool(false),
Name: pulumi.String("string"),
})
var examplecertificateResourceResourceFromIotcertificate = new com.pulumi.azure.iot.Certificate("examplecertificateResourceResourceFromIotcertificate", com.pulumi.azure.iot.CertificateArgs.builder()
.certificateContent("string")
.iothubName("string")
.resourceGroupName("string")
.isVerified(false)
.name("string")
.build());
examplecertificate_resource_resource_from_iotcertificate = azure.iot.Certificate("examplecertificateResourceResourceFromIotcertificate",
certificate_content="string",
iothub_name="string",
resource_group_name="string",
is_verified=False,
name="string")
const examplecertificateResourceResourceFromIotcertificate = new azure.iot.Certificate("examplecertificateResourceResourceFromIotcertificate", {
certificateContent: "string",
iothubName: "string",
resourceGroupName: "string",
isVerified: false,
name: "string",
});
type: azure:iot:Certificate
properties:
certificateContent: string
iothubName: string
isVerified: false
name: string
resourceGroupName: string
Certificate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Certificate resource accepts the following input properties:
- Certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- Iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- Resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- Is
Verified bool - Is the certificate verified? Defaults to
false. - Name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- Certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- Iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- Resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- Is
Verified bool - Is the certificate verified? Defaults to
false. - Name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- certificate
Content String - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name String - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- resource
Group StringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- is
Verified Boolean - Is the certificate verified? Defaults to
false. - name String
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- is
Verified boolean - Is the certificate verified? Defaults to
false. - name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- certificate_
content str - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub_
name str - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- resource_
group_ strname - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- is_
verified bool - Is the certificate verified? Defaults to
false. - name str
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- certificate
Content String - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name String - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- resource
Group StringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- is
Verified Boolean - Is the certificate verified? Defaults to
false. - name String
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
Outputs
All input properties are implicitly available as output properties. Additionally, the Certificate resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Certificate Resource
Get an existing Certificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CertificateState, opts?: CustomResourceOptions): Certificate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
certificate_content: Optional[str] = None,
iothub_name: Optional[str] = None,
is_verified: Optional[bool] = None,
name: Optional[str] = None,
resource_group_name: Optional[str] = None) -> Certificatefunc GetCertificate(ctx *Context, name string, id IDInput, state *CertificateState, opts ...ResourceOption) (*Certificate, error)public static Certificate Get(string name, Input<string> id, CertificateState? state, CustomResourceOptions? opts = null)public static Certificate get(String name, Output<String> id, CertificateState state, CustomResourceOptions options)resources: _: type: azure:iot:Certificate get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- Iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- Is
Verified bool - Is the certificate verified? Defaults to
false. - Name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- Resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- Certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- Iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- Is
Verified bool - Is the certificate verified? Defaults to
false. - Name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- Resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- certificate
Content String - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name String - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- is
Verified Boolean - Is the certificate verified? Defaults to
false. - name String
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- resource
Group StringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- certificate
Content string - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name string - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- is
Verified boolean - Is the certificate verified? Defaults to
false. - name string
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- resource
Group stringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- certificate_
content str - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub_
name str - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- is_
verified bool - Is the certificate verified? Defaults to
false. - name str
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- resource_
group_ strname - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
- certificate
Content String - The Base-64 representation of the X509 leaf certificate .cer file or just a .pem file content.
- iothub
Name String - The name of the IoTHub that this certificate will be attached to. Changing this forces a new resource to be created.
- is
Verified Boolean - Is the certificate verified? Defaults to
false. - name String
- Specifies the name of the IotHub Certificate resource. Changing this forces a new resource to be created.
- resource
Group StringName - The name of the resource group under which the IotHub Certificate resource has to be created. Changing this forces a new resource to be created.
Import
IoTHub Certificates can be imported using the resource id, e.g.
$ pulumi import azure:iot/certificate:Certificate example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Devices/IotHubs/example/Certificates/example
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.
We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
