Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Fortimanager Provider
  4. API Docs
  5. ObjectCertificateTemplate
Viewing docs for fortimanager 1.18.1
published on Thursday, Sep 17, 2026 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectCertificateTemplate

fortimanager
Viewing docs for fortimanager 1.18.1
published on Thursday, Sep 17, 2026 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

    ObjectCertificate Template

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trname = new fortimanager.ObjectCertificateTemplate("trname", {
    city: "Cd",
    country: "AM",
    curveName: "secp256r1",
    digestType: "sha1",
    email: "dfa@efsa.com",
    idType: "host-ip",
    keySize: "2048",
    keyType: "rsa",
    name: "ssss",
    organization: "fds",
    organizationUnits: ["FortinetTestLab"],
    scepPasswords: ["33333"],
    state: "dfa",
    type: "external",
});

    import pulumi
import pulumi_fortimanager as fortimanager

trname = fortimanager.ObjectCertificateTemplate("trname",
    city="Cd",
    country="AM",
    curve_name="secp256r1",
    digest_type="sha1",
    email="dfa@efsa.com",
    id_type="host-ip",
    key_size="2048",
    key_type="rsa",
    name="ssss",
    organization="fds",
    organization_units=["FortinetTestLab"],
    scep_passwords=["33333"],
    state="dfa",
    type="external")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewObjectCertificateTemplate(ctx, "trname", &fortimanager.ObjectCertificateTemplateArgs{
			City:         pulumi.String("Cd"),
			Country:      pulumi.String("AM"),
			CurveName:    pulumi.String("secp256r1"),
			DigestType:   pulumi.String("sha1"),
			Email:        pulumi.String("dfa@efsa.com"),
			IdType:       pulumi.String("host-ip"),
			KeySize:      pulumi.String("2048"),
			KeyType:      pulumi.String("rsa"),
			Name:         pulumi.String("ssss"),
			Organization: pulumi.String("fds"),
			OrganizationUnits: pulumi.StringArray{
				pulumi.String("FortinetTestLab"),
			},
			ScepPasswords: pulumi.StringArray{
				pulumi.String("33333"),
			},
			State: pulumi.String("dfa"),
			Type:  pulumi.String("external"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortimanager.ObjectCertificateTemplate("trname", new()
    {
        City = "Cd",
        Country = "AM",
        CurveName = "secp256r1",
        DigestType = "sha1",
        Email = "dfa@efsa.com",
        IdType = "host-ip",
        KeySize = "2048",
        KeyType = "rsa",
        Name = "ssss",
        Organization = "fds",
        OrganizationUnits = new[]
        {
            "FortinetTestLab",
        },
        ScepPasswords = new[]
        {
            "33333",
        },
        State = "dfa",
        Type = "external",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectCertificateTemplate;
import com.pulumi.fortimanager.ObjectCertificateTemplateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new ObjectCertificateTemplate("trname", ObjectCertificateTemplateArgs.builder()
            .city("Cd")
            .country("AM")
            .curveName("secp256r1")
            .digestType("sha1")
            .email("dfa@efsa.com")
            .idType("host-ip")
            .keySize("2048")
            .keyType("rsa")
            .name("ssss")
            .organization("fds")
            .organizationUnits("FortinetTestLab")
            .scepPasswords("33333")
            .state("dfa")
            .type("external")
            .build());

    }
}

    resources:
  trname:
    type: fortimanager:ObjectCertificateTemplate
    properties:
      city: Cd
      country: AM
      curveName: secp256r1
      digestType: sha1
      email: dfa@efsa.com
      idType: host-ip
      keySize: '2048'
      keyType: rsa
      name: ssss
      organization: fds
      organizationUnits:
        - FortinetTestLab
      scepPasswords:
        - '33333'
      state: dfa
      type: external

    Example coming soon!

    Create ObjectCertificateTemplate Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectCertificateTemplate(name: string, args?: ObjectCertificateTemplateArgs, opts?: CustomResourceOptions);
    @overload
def ObjectCertificateTemplate(resource_name: str,
                              args: Optional[ObjectCertificateTemplateArgs] = None,
                              opts: Optional[ResourceOptions] = None)

@overload
def ObjectCertificateTemplate(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              adom: Optional[str] = None,
                              city: Optional[str] = None,
                              country: Optional[str] = None,
                              curve_name: Optional[str] = None,
                              digest_type: Optional[str] = None,
                              email: Optional[str] = None,
                              enroll_protocol: Optional[str] = None,
                              est_ca_id: Optional[str] = None,
                              est_client_certs: Optional[Sequence[str]] = None,
                              est_http_passwords: Optional[Sequence[str]] = None,
                              est_http_username: Optional[str] = None,
                              est_regeneration_method: Optional[str] = None,
                              est_server_certs: Optional[Sequence[str]] = None,
                              est_server_url: Optional[str] = None,
                              est_srp_passwords: Optional[Sequence[str]] = None,
                              est_srp_username: Optional[str] = None,
                              id_type: Optional[str] = None,
                              key_size: Optional[str] = None,
                              key_type: Optional[str] = None,
                              name: Optional[str] = None,
                              object_certificate_template_id: Optional[str] = None,
                              organization: Optional[str] = None,
                              organization_units: Optional[Sequence[str]] = None,
                              scep_ca_identifier: Optional[str] = None,
                              scep_passwords: Optional[Sequence[str]] = None,
                              scep_server: Optional[str] = None,
                              scopetype: Optional[str] = None,
                              source_ip: Optional[str] = None,
                              state: Optional[str] = None,
                              subject_alt_name: Optional[str] = None,
                              subject_name: Optional[str] = None,
                              type: Optional[str] = None,
                              update_if_exist: Optional[bool] = None,
                              validity: Optional[float] = None)
    func NewObjectCertificateTemplate(ctx *Context, name string, args *ObjectCertificateTemplateArgs, opts ...ResourceOption) (*ObjectCertificateTemplate, error)
    public ObjectCertificateTemplate(string name, ObjectCertificateTemplateArgs? args = null, CustomResourceOptions? opts = null)
    public ObjectCertificateTemplate(String name, ObjectCertificateTemplateArgs args)
public ObjectCertificateTemplate(String name, ObjectCertificateTemplateArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectCertificateTemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "fortimanager_object_certificate_template" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ObjectCertificateTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectCertificateTemplateArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectCertificateTemplateArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectCertificateTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectCertificateTemplateArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectCertificateTemplateResource = new Fortimanager.ObjectCertificateTemplate("objectCertificateTemplateResource", new()
{
    Adom = "string",
    City = "string",
    Country = "string",
    CurveName = "string",
    DigestType = "string",
    Email = "string",
    EnrollProtocol = "string",
    EstCaId = "string",
    EstClientCerts = new[]
    {
        "string",
    },
    EstHttpPasswords = new[]
    {
        "string",
    },
    EstHttpUsername = "string",
    EstRegenerationMethod = "string",
    EstServerCerts = new[]
    {
        "string",
    },
    EstServerUrl = "string",
    EstSrpPasswords = new[]
    {
        "string",
    },
    EstSrpUsername = "string",
    IdType = "string",
    KeySize = "string",
    KeyType = "string",
    Name = "string",
    ObjectCertificateTemplateId = "string",
    Organization = "string",
    OrganizationUnits = new[]
    {
        "string",
    },
    ScepCaIdentifier = "string",
    ScepPasswords = new[]
    {
        "string",
    },
    ScepServer = "string",
    Scopetype = "string",
    SourceIp = "string",
    State = "string",
    SubjectAltName = "string",
    SubjectName = "string",
    Type = "string",
    UpdateIfExist = false,
    Validity = 0.0,
});

    example, err := fortimanager.NewObjectCertificateTemplate(ctx, "objectCertificateTemplateResource", &fortimanager.ObjectCertificateTemplateArgs{
	Adom:           pulumi.String("string"),
	City:           pulumi.String("string"),
	Country:        pulumi.String("string"),
	CurveName:      pulumi.String("string"),
	DigestType:     pulumi.String("string"),
	Email:          pulumi.String("string"),
	EnrollProtocol: pulumi.String("string"),
	EstCaId:        pulumi.String("string"),
	EstClientCerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	EstHttpPasswords: pulumi.StringArray{
		pulumi.String("string"),
	},
	EstHttpUsername:       pulumi.String("string"),
	EstRegenerationMethod: pulumi.String("string"),
	EstServerCerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	EstServerUrl: pulumi.String("string"),
	EstSrpPasswords: pulumi.StringArray{
		pulumi.String("string"),
	},
	EstSrpUsername:              pulumi.String("string"),
	IdType:                      pulumi.String("string"),
	KeySize:                     pulumi.String("string"),
	KeyType:                     pulumi.String("string"),
	Name:                        pulumi.String("string"),
	ObjectCertificateTemplateId: pulumi.String("string"),
	Organization:                pulumi.String("string"),
	OrganizationUnits: pulumi.StringArray{
		pulumi.String("string"),
	},
	ScepCaIdentifier: pulumi.String("string"),
	ScepPasswords: pulumi.StringArray{
		pulumi.String("string"),
	},
	ScepServer:     pulumi.String("string"),
	Scopetype:      pulumi.String("string"),
	SourceIp:       pulumi.String("string"),
	State:          pulumi.String("string"),
	SubjectAltName: pulumi.String("string"),
	SubjectName:    pulumi.String("string"),
	Type:           pulumi.String("string"),
	UpdateIfExist:  pulumi.Bool(false),
	Validity:       pulumi.Float64(0),
})

    resource "fortimanager_object_certificate_template" "objectCertificateTemplateResource" {
  lifecycle {
    create_before_destroy = true
  }
  adom                           = "string"
  city                           = "string"
  country                        = "string"
  curve_name                     = "string"
  digest_type                    = "string"
  email                          = "string"
  enroll_protocol                = "string"
  est_ca_id                      = "string"
  est_client_certs               = ["string"]
  est_http_passwords             = ["string"]
  est_http_username              = "string"
  est_regeneration_method        = "string"
  est_server_certs               = ["string"]
  est_server_url                 = "string"
  est_srp_passwords              = ["string"]
  est_srp_username               = "string"
  id_type                        = "string"
  key_size                       = "string"
  key_type                       = "string"
  name                           = "string"
  object_certificate_template_id = "string"
  organization                   = "string"
  organization_units             = ["string"]
  scep_ca_identifier             = "string"
  scep_passwords                 = ["string"]
  scep_server                    = "string"
  scopetype                      = "string"
  source_ip                      = "string"
  state                          = "string"
  subject_alt_name               = "string"
  subject_name                   = "string"
  type                           = "string"
  update_if_exist                = false
  validity                       = 0
}

    var objectCertificateTemplateResource = new ObjectCertificateTemplate("objectCertificateTemplateResource", ObjectCertificateTemplateArgs.builder()
    .adom("string")
    .city("string")
    .country("string")
    .curveName("string")
    .digestType("string")
    .email("string")
    .enrollProtocol("string")
    .estCaId("string")
    .estClientCerts("string")
    .estHttpPasswords("string")
    .estHttpUsername("string")
    .estRegenerationMethod("string")
    .estServerCerts("string")
    .estServerUrl("string")
    .estSrpPasswords("string")
    .estSrpUsername("string")
    .idType("string")
    .keySize("string")
    .keyType("string")
    .name("string")
    .objectCertificateTemplateId("string")
    .organization("string")
    .organizationUnits("string")
    .scepCaIdentifier("string")
    .scepPasswords("string")
    .scepServer("string")
    .scopetype("string")
    .sourceIp("string")
    .state("string")
    .subjectAltName("string")
    .subjectName("string")
    .type("string")
    .updateIfExist(false)
    .validity(0.0)
    .build());

    object_certificate_template_resource = fortimanager.ObjectCertificateTemplate("objectCertificateTemplateResource",
    adom="string",
    city="string",
    country="string",
    curve_name="string",
    digest_type="string",
    email="string",
    enroll_protocol="string",
    est_ca_id="string",
    est_client_certs=["string"],
    est_http_passwords=["string"],
    est_http_username="string",
    est_regeneration_method="string",
    est_server_certs=["string"],
    est_server_url="string",
    est_srp_passwords=["string"],
    est_srp_username="string",
    id_type="string",
    key_size="string",
    key_type="string",
    name="string",
    object_certificate_template_id="string",
    organization="string",
    organization_units=["string"],
    scep_ca_identifier="string",
    scep_passwords=["string"],
    scep_server="string",
    scopetype="string",
    source_ip="string",
    state="string",
    subject_alt_name="string",
    subject_name="string",
    type="string",
    update_if_exist=False,
    validity=float(0))

    const objectCertificateTemplateResource = new fortimanager.ObjectCertificateTemplate("objectCertificateTemplateResource", {
    adom: "string",
    city: "string",
    country: "string",
    curveName: "string",
    digestType: "string",
    email: "string",
    enrollProtocol: "string",
    estCaId: "string",
    estClientCerts: ["string"],
    estHttpPasswords: ["string"],
    estHttpUsername: "string",
    estRegenerationMethod: "string",
    estServerCerts: ["string"],
    estServerUrl: "string",
    estSrpPasswords: ["string"],
    estSrpUsername: "string",
    idType: "string",
    keySize: "string",
    keyType: "string",
    name: "string",
    objectCertificateTemplateId: "string",
    organization: "string",
    organizationUnits: ["string"],
    scepCaIdentifier: "string",
    scepPasswords: ["string"],
    scepServer: "string",
    scopetype: "string",
    sourceIp: "string",
    state: "string",
    subjectAltName: "string",
    subjectName: "string",
    type: "string",
    updateIfExist: false,
    validity: 0,
});

    type: fortimanager:ObjectCertificateTemplate
properties:
    adom: string
    city: string
    country: string
    curveName: string
    digestType: string
    email: string
    enrollProtocol: string
    estCaId: string
    estClientCerts:
        - string
    estHttpPasswords:
        - string
    estHttpUsername: string
    estRegenerationMethod: string
    estServerCerts:
        - string
    estServerUrl: string
    estSrpPasswords:
        - string
    estSrpUsername: string
    idType: string
    keySize: string
    keyType: string
    name: string
    objectCertificateTemplateId: string
    organization: string
    organizationUnits:
        - string
    scepCaIdentifier: string
    scepPasswords:
        - string
    scepServer: string
    scopetype: string
    sourceIp: string
    state: string
    subjectAltName: string
    subjectName: string
    type: string
    updateIfExist: false
    validity: 0

    ObjectCertificateTemplate Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectCertificateTemplate resource accepts the following input properties:

    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    City string
    City.
    Country string
    Country.
    CurveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    DigestType string
    Digest-Type. Valid values: sha1, sha256.
    Email string
    Email.
    EnrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    EstCaId string
    Est-Ca-Id.
    EstClientCerts List<string>
    Est-Client-Cert.
    EstHttpPasswords List<string>
    Est-Http-Password.
    EstHttpUsername string
    Est-Http-Username.
    EstRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    EstServerCerts List<string>
    Est-Server-Cert.
    EstServerUrl string
    Est-Server-Url.
    EstSrpPasswords List<string>
    Est-Srp-Password.
    EstSrpUsername string
    Est-Srp-Username.
    IdType string
    Id-Type. Valid values: host-ip, domain-name, email.
    KeySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    KeyType string
    Key-Type. Valid values: rsa, ec.
    Name string
    Name.
    ObjectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    Organization string
    Organization.
    OrganizationUnits List<string>
    Organization-Unit.
    ScepCaIdentifier string
    Scep-Ca-Identifier.
    ScepPasswords List<string>
    Scep-Password.
    ScepServer string
    Scep-Server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SourceIp string
    Source-Ip.
    State string
    State.
    SubjectAltName string
    Support meta variable
    SubjectName string
    Subject-Name.
    Type string
    Type. Valid values: external, local.
    UpdateIfExist bool
    Validity double
    Validity.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    City string
    City.
    Country string
    Country.
    CurveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    DigestType string
    Digest-Type. Valid values: sha1, sha256.
    Email string
    Email.
    EnrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    EstCaId string
    Est-Ca-Id.
    EstClientCerts []string
    Est-Client-Cert.
    EstHttpPasswords []string
    Est-Http-Password.
    EstHttpUsername string
    Est-Http-Username.
    EstRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    EstServerCerts []string
    Est-Server-Cert.
    EstServerUrl string
    Est-Server-Url.
    EstSrpPasswords []string
    Est-Srp-Password.
    EstSrpUsername string
    Est-Srp-Username.
    IdType string
    Id-Type. Valid values: host-ip, domain-name, email.
    KeySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    KeyType string
    Key-Type. Valid values: rsa, ec.
    Name string
    Name.
    ObjectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    Organization string
    Organization.
    OrganizationUnits []string
    Organization-Unit.
    ScepCaIdentifier string
    Scep-Ca-Identifier.
    ScepPasswords []string
    Scep-Password.
    ScepServer string
    Scep-Server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SourceIp string
    Source-Ip.
    State string
    State.
    SubjectAltName string
    Support meta variable
    SubjectName string
    Subject-Name.
    Type string
    Type. Valid values: external, local.
    UpdateIfExist bool
    Validity float64
    Validity.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city string
    City.
    country string
    Country.
    curve_name string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digest_type string
    Digest-Type. Valid values: sha1, sha256.
    email string
    Email.
    enroll_protocol string
    Enroll-Protocol. Valid values: scep, est.
    est_ca_id string
    Est-Ca-Id.
    est_client_certs list(string)
    Est-Client-Cert.
    est_http_passwords list(string)
    Est-Http-Password.
    est_http_username string
    Est-Http-Username.
    est_regeneration_method string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    est_server_certs list(string)
    Est-Server-Cert.
    est_server_url string
    Est-Server-Url.
    est_srp_passwords list(string)
    Est-Srp-Password.
    est_srp_username string
    Est-Srp-Username.
    id_type string
    Id-Type. Valid values: host-ip, domain-name, email.
    key_size string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    key_type string
    Key-Type. Valid values: rsa, ec.
    name string
    Name.
    object_certificate_template_id string
    an identifier for the resource with format {{name}}.
    organization string
    Organization.
    organization_units list(string)
    Organization-Unit.
    scep_ca_identifier string
    Scep-Ca-Identifier.
    scep_passwords list(string)
    Scep-Password.
    scep_server string
    Scep-Server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    source_ip string
    Source-Ip.
    state string
    State.
    subject_alt_name string
    Support meta variable
    subject_name string
    Subject-Name.
    type string
    Type. Valid values: external, local.
    update_if_exist bool
    validity number
    Validity.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city String
    City.
    country String
    Country.
    curveName String
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType String
    Digest-Type. Valid values: sha1, sha256.
    email String
    Email.
    enrollProtocol String
    Enroll-Protocol. Valid values: scep, est.
    estCaId String
    Est-Ca-Id.
    estClientCerts List<String>
    Est-Client-Cert.
    estHttpPasswords List<String>
    Est-Http-Password.
    estHttpUsername String
    Est-Http-Username.
    estRegenerationMethod String
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts List<String>
    Est-Server-Cert.
    estServerUrl String
    Est-Server-Url.
    estSrpPasswords List<String>
    Est-Srp-Password.
    estSrpUsername String
    Est-Srp-Username.
    idType String
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize String
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType String
    Key-Type. Valid values: rsa, ec.
    name String
    Name.
    objectCertificateTemplateId String
    an identifier for the resource with format {{name}}.
    organization String
    Organization.
    organizationUnits List<String>
    Organization-Unit.
    scepCaIdentifier String
    Scep-Ca-Identifier.
    scepPasswords List<String>
    Scep-Password.
    scepServer String
    Scep-Server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp String
    Source-Ip.
    state String
    State.
    subjectAltName String
    Support meta variable
    subjectName String
    Subject-Name.
    type String
    Type. Valid values: external, local.
    updateIfExist Boolean
    validity Double
    Validity.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city string
    City.
    country string
    Country.
    curveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType string
    Digest-Type. Valid values: sha1, sha256.
    email string
    Email.
    enrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    estCaId string
    Est-Ca-Id.
    estClientCerts string[]
    Est-Client-Cert.
    estHttpPasswords string[]
    Est-Http-Password.
    estHttpUsername string
    Est-Http-Username.
    estRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts string[]
    Est-Server-Cert.
    estServerUrl string
    Est-Server-Url.
    estSrpPasswords string[]
    Est-Srp-Password.
    estSrpUsername string
    Est-Srp-Username.
    idType string
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType string
    Key-Type. Valid values: rsa, ec.
    name string
    Name.
    objectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    organization string
    Organization.
    organizationUnits string[]
    Organization-Unit.
    scepCaIdentifier string
    Scep-Ca-Identifier.
    scepPasswords string[]
    Scep-Password.
    scepServer string
    Scep-Server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp string
    Source-Ip.
    state string
    State.
    subjectAltName string
    Support meta variable
    subjectName string
    Subject-Name.
    type string
    Type. Valid values: external, local.
    updateIfExist boolean
    validity number
    Validity.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city str
    City.
    country str
    Country.
    curve_name str
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digest_type str
    Digest-Type. Valid values: sha1, sha256.
    email str
    Email.
    enroll_protocol str
    Enroll-Protocol. Valid values: scep, est.
    est_ca_id str
    Est-Ca-Id.
    est_client_certs Sequence[str]
    Est-Client-Cert.
    est_http_passwords Sequence[str]
    Est-Http-Password.
    est_http_username str
    Est-Http-Username.
    est_regeneration_method str
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    est_server_certs Sequence[str]
    Est-Server-Cert.
    est_server_url str
    Est-Server-Url.
    est_srp_passwords Sequence[str]
    Est-Srp-Password.
    est_srp_username str
    Est-Srp-Username.
    id_type str
    Id-Type. Valid values: host-ip, domain-name, email.
    key_size str
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    key_type str
    Key-Type. Valid values: rsa, ec.
    name str
    Name.
    object_certificate_template_id str
    an identifier for the resource with format {{name}}.
    organization str
    Organization.
    organization_units Sequence[str]
    Organization-Unit.
    scep_ca_identifier str
    Scep-Ca-Identifier.
    scep_passwords Sequence[str]
    Scep-Password.
    scep_server str
    Scep-Server.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    source_ip str
    Source-Ip.
    state str
    State.
    subject_alt_name str
    Support meta variable
    subject_name str
    Subject-Name.
    type str
    Type. Valid values: external, local.
    update_if_exist bool
    validity float
    Validity.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city String
    City.
    country String
    Country.
    curveName String
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType String
    Digest-Type. Valid values: sha1, sha256.
    email String
    Email.
    enrollProtocol String
    Enroll-Protocol. Valid values: scep, est.
    estCaId String
    Est-Ca-Id.
    estClientCerts List<String>
    Est-Client-Cert.
    estHttpPasswords List<String>
    Est-Http-Password.
    estHttpUsername String
    Est-Http-Username.
    estRegenerationMethod String
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts List<String>
    Est-Server-Cert.
    estServerUrl String
    Est-Server-Url.
    estSrpPasswords List<String>
    Est-Srp-Password.
    estSrpUsername String
    Est-Srp-Username.
    idType String
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize String
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType String
    Key-Type. Valid values: rsa, ec.
    name String
    Name.
    objectCertificateTemplateId String
    an identifier for the resource with format {{name}}.
    organization String
    Organization.
    organizationUnits List<String>
    Organization-Unit.
    scepCaIdentifier String
    Scep-Ca-Identifier.
    scepPasswords List<String>
    Scep-Password.
    scepServer String
    Scep-Server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp String
    Source-Ip.
    state String
    State.
    subjectAltName String
    Support meta variable
    subjectName String
    Subject-Name.
    type String
    Type. Valid values: external, local.
    updateIfExist Boolean
    validity Number
    Validity.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectCertificateTemplate resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectCertificateTemplate Resource

    Get an existing ObjectCertificateTemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectCertificateTemplateState, opts?: CustomResourceOptions): ObjectCertificateTemplate
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom: Optional[str] = None,
        city: Optional[str] = None,
        country: Optional[str] = None,
        curve_name: Optional[str] = None,
        digest_type: Optional[str] = None,
        email: Optional[str] = None,
        enroll_protocol: Optional[str] = None,
        est_ca_id: Optional[str] = None,
        est_client_certs: Optional[Sequence[str]] = None,
        est_http_passwords: Optional[Sequence[str]] = None,
        est_http_username: Optional[str] = None,
        est_regeneration_method: Optional[str] = None,
        est_server_certs: Optional[Sequence[str]] = None,
        est_server_url: Optional[str] = None,
        est_srp_passwords: Optional[Sequence[str]] = None,
        est_srp_username: Optional[str] = None,
        id_type: Optional[str] = None,
        key_size: Optional[str] = None,
        key_type: Optional[str] = None,
        name: Optional[str] = None,
        object_certificate_template_id: Optional[str] = None,
        organization: Optional[str] = None,
        organization_units: Optional[Sequence[str]] = None,
        scep_ca_identifier: Optional[str] = None,
        scep_passwords: Optional[Sequence[str]] = None,
        scep_server: Optional[str] = None,
        scopetype: Optional[str] = None,
        source_ip: Optional[str] = None,
        state: Optional[str] = None,
        subject_alt_name: Optional[str] = None,
        subject_name: Optional[str] = None,
        type: Optional[str] = None,
        update_if_exist: Optional[bool] = None,
        validity: Optional[float] = None) -> ObjectCertificateTemplate
    func GetObjectCertificateTemplate(ctx *Context, name string, id IDInput, state *ObjectCertificateTemplateState, opts ...ResourceOption) (*ObjectCertificateTemplate, error)
    public static ObjectCertificateTemplate Get(string name, Input<string> id, ObjectCertificateTemplateState? state, CustomResourceOptions? opts = null)
    public static ObjectCertificateTemplate get(String name, Output<String> id, ObjectCertificateTemplateState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectCertificateTemplate    get:      id: ${id}
    import {
  to = fortimanager_object_certificate_template.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    City string
    City.
    Country string
    Country.
    CurveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    DigestType string
    Digest-Type. Valid values: sha1, sha256.
    Email string
    Email.
    EnrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    EstCaId string
    Est-Ca-Id.
    EstClientCerts List<string>
    Est-Client-Cert.
    EstHttpPasswords List<string>
    Est-Http-Password.
    EstHttpUsername string
    Est-Http-Username.
    EstRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    EstServerCerts List<string>
    Est-Server-Cert.
    EstServerUrl string
    Est-Server-Url.
    EstSrpPasswords List<string>
    Est-Srp-Password.
    EstSrpUsername string
    Est-Srp-Username.
    IdType string
    Id-Type. Valid values: host-ip, domain-name, email.
    KeySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    KeyType string
    Key-Type. Valid values: rsa, ec.
    Name string
    Name.
    ObjectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    Organization string
    Organization.
    OrganizationUnits List<string>
    Organization-Unit.
    ScepCaIdentifier string
    Scep-Ca-Identifier.
    ScepPasswords List<string>
    Scep-Password.
    ScepServer string
    Scep-Server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SourceIp string
    Source-Ip.
    State string
    State.
    SubjectAltName string
    Support meta variable
    SubjectName string
    Subject-Name.
    Type string
    Type. Valid values: external, local.
    UpdateIfExist bool
    Validity double
    Validity.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    City string
    City.
    Country string
    Country.
    CurveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    DigestType string
    Digest-Type. Valid values: sha1, sha256.
    Email string
    Email.
    EnrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    EstCaId string
    Est-Ca-Id.
    EstClientCerts []string
    Est-Client-Cert.
    EstHttpPasswords []string
    Est-Http-Password.
    EstHttpUsername string
    Est-Http-Username.
    EstRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    EstServerCerts []string
    Est-Server-Cert.
    EstServerUrl string
    Est-Server-Url.
    EstSrpPasswords []string
    Est-Srp-Password.
    EstSrpUsername string
    Est-Srp-Username.
    IdType string
    Id-Type. Valid values: host-ip, domain-name, email.
    KeySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    KeyType string
    Key-Type. Valid values: rsa, ec.
    Name string
    Name.
    ObjectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    Organization string
    Organization.
    OrganizationUnits []string
    Organization-Unit.
    ScepCaIdentifier string
    Scep-Ca-Identifier.
    ScepPasswords []string
    Scep-Password.
    ScepServer string
    Scep-Server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SourceIp string
    Source-Ip.
    State string
    State.
    SubjectAltName string
    Support meta variable
    SubjectName string
    Subject-Name.
    Type string
    Type. Valid values: external, local.
    UpdateIfExist bool
    Validity float64
    Validity.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city string
    City.
    country string
    Country.
    curve_name string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digest_type string
    Digest-Type. Valid values: sha1, sha256.
    email string
    Email.
    enroll_protocol string
    Enroll-Protocol. Valid values: scep, est.
    est_ca_id string
    Est-Ca-Id.
    est_client_certs list(string)
    Est-Client-Cert.
    est_http_passwords list(string)
    Est-Http-Password.
    est_http_username string
    Est-Http-Username.
    est_regeneration_method string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    est_server_certs list(string)
    Est-Server-Cert.
    est_server_url string
    Est-Server-Url.
    est_srp_passwords list(string)
    Est-Srp-Password.
    est_srp_username string
    Est-Srp-Username.
    id_type string
    Id-Type. Valid values: host-ip, domain-name, email.
    key_size string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    key_type string
    Key-Type. Valid values: rsa, ec.
    name string
    Name.
    object_certificate_template_id string
    an identifier for the resource with format {{name}}.
    organization string
    Organization.
    organization_units list(string)
    Organization-Unit.
    scep_ca_identifier string
    Scep-Ca-Identifier.
    scep_passwords list(string)
    Scep-Password.
    scep_server string
    Scep-Server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    source_ip string
    Source-Ip.
    state string
    State.
    subject_alt_name string
    Support meta variable
    subject_name string
    Subject-Name.
    type string
    Type. Valid values: external, local.
    update_if_exist bool
    validity number
    Validity.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city String
    City.
    country String
    Country.
    curveName String
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType String
    Digest-Type. Valid values: sha1, sha256.
    email String
    Email.
    enrollProtocol String
    Enroll-Protocol. Valid values: scep, est.
    estCaId String
    Est-Ca-Id.
    estClientCerts List<String>
    Est-Client-Cert.
    estHttpPasswords List<String>
    Est-Http-Password.
    estHttpUsername String
    Est-Http-Username.
    estRegenerationMethod String
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts List<String>
    Est-Server-Cert.
    estServerUrl String
    Est-Server-Url.
    estSrpPasswords List<String>
    Est-Srp-Password.
    estSrpUsername String
    Est-Srp-Username.
    idType String
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize String
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType String
    Key-Type. Valid values: rsa, ec.
    name String
    Name.
    objectCertificateTemplateId String
    an identifier for the resource with format {{name}}.
    organization String
    Organization.
    organizationUnits List<String>
    Organization-Unit.
    scepCaIdentifier String
    Scep-Ca-Identifier.
    scepPasswords List<String>
    Scep-Password.
    scepServer String
    Scep-Server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp String
    Source-Ip.
    state String
    State.
    subjectAltName String
    Support meta variable
    subjectName String
    Subject-Name.
    type String
    Type. Valid values: external, local.
    updateIfExist Boolean
    validity Double
    Validity.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city string
    City.
    country string
    Country.
    curveName string
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType string
    Digest-Type. Valid values: sha1, sha256.
    email string
    Email.
    enrollProtocol string
    Enroll-Protocol. Valid values: scep, est.
    estCaId string
    Est-Ca-Id.
    estClientCerts string[]
    Est-Client-Cert.
    estHttpPasswords string[]
    Est-Http-Password.
    estHttpUsername string
    Est-Http-Username.
    estRegenerationMethod string
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts string[]
    Est-Server-Cert.
    estServerUrl string
    Est-Server-Url.
    estSrpPasswords string[]
    Est-Srp-Password.
    estSrpUsername string
    Est-Srp-Username.
    idType string
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize string
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType string
    Key-Type. Valid values: rsa, ec.
    name string
    Name.
    objectCertificateTemplateId string
    an identifier for the resource with format {{name}}.
    organization string
    Organization.
    organizationUnits string[]
    Organization-Unit.
    scepCaIdentifier string
    Scep-Ca-Identifier.
    scepPasswords string[]
    Scep-Password.
    scepServer string
    Scep-Server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp string
    Source-Ip.
    state string
    State.
    subjectAltName string
    Support meta variable
    subjectName string
    Subject-Name.
    type string
    Type. Valid values: external, local.
    updateIfExist boolean
    validity number
    Validity.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city str
    City.
    country str
    Country.
    curve_name str
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digest_type str
    Digest-Type. Valid values: sha1, sha256.
    email str
    Email.
    enroll_protocol str
    Enroll-Protocol. Valid values: scep, est.
    est_ca_id str
    Est-Ca-Id.
    est_client_certs Sequence[str]
    Est-Client-Cert.
    est_http_passwords Sequence[str]
    Est-Http-Password.
    est_http_username str
    Est-Http-Username.
    est_regeneration_method str
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    est_server_certs Sequence[str]
    Est-Server-Cert.
    est_server_url str
    Est-Server-Url.
    est_srp_passwords Sequence[str]
    Est-Srp-Password.
    est_srp_username str
    Est-Srp-Username.
    id_type str
    Id-Type. Valid values: host-ip, domain-name, email.
    key_size str
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    key_type str
    Key-Type. Valid values: rsa, ec.
    name str
    Name.
    object_certificate_template_id str
    an identifier for the resource with format {{name}}.
    organization str
    Organization.
    organization_units Sequence[str]
    Organization-Unit.
    scep_ca_identifier str
    Scep-Ca-Identifier.
    scep_passwords Sequence[str]
    Scep-Password.
    scep_server str
    Scep-Server.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    source_ip str
    Source-Ip.
    state str
    State.
    subject_alt_name str
    Support meta variable
    subject_name str
    Subject-Name.
    type str
    Type. Valid values: external, local.
    update_if_exist bool
    validity float
    Validity.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    city String
    City.
    country String
    Country.
    curveName String
    Curve-Name. Valid values: secp256r1, secp384r1, secp521r1.
    digestType String
    Digest-Type. Valid values: sha1, sha256.
    email String
    Email.
    enrollProtocol String
    Enroll-Protocol. Valid values: scep, est.
    estCaId String
    Est-Ca-Id.
    estClientCerts List<String>
    Est-Client-Cert.
    estHttpPasswords List<String>
    Est-Http-Password.
    estHttpUsername String
    Est-Http-Username.
    estRegenerationMethod String
    Est-Regeneration-Method. Valid values: create-new-key, use-existing-key.
    estServerCerts List<String>
    Est-Server-Cert.
    estServerUrl String
    Est-Server-Url.
    estSrpPasswords List<String>
    Est-Srp-Password.
    estSrpUsername String
    Est-Srp-Username.
    idType String
    Id-Type. Valid values: host-ip, domain-name, email.
    keySize String
    Key-Size. Valid values: 512, 1024, 1536, 2048, 4096.
    keyType String
    Key-Type. Valid values: rsa, ec.
    name String
    Name.
    objectCertificateTemplateId String
    an identifier for the resource with format {{name}}.
    organization String
    Organization.
    organizationUnits List<String>
    Organization-Unit.
    scepCaIdentifier String
    Scep-Ca-Identifier.
    scepPasswords List<String>
    Scep-Password.
    scepServer String
    Scep-Server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sourceIp String
    Source-Ip.
    state String
    State.
    subjectAltName String
    Support meta variable
    subjectName String
    Subject-Name.
    type String
    Type. Valid values: external, local.
    updateIfExist Boolean
    validity Number
    Validity.

    Import

    ObjectCertificate Template can be imported using any of these accepted formats:

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectCertificateTemplate:ObjectCertificateTemplate labelname {{name}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager
    Viewing docs for fortimanager 1.18.1
    published on Thursday, Sep 17, 2026 by fortinetdev
    Schema (JSON)
    fortinetdev/terraform-provider-fortimanager

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial