Rotates the AS2 signing/decryption identity without a restart. The new

key + certificate are validated (parseable, not expired) before the atomic swap; in-flight requests finish with the identity they started with…

POST /v1/as2/identity

cURL

curl --request POST \
  --url 'https://edi.stateset.com/v1/as2/identity' \
  --header "Authorization: Bearer $STATESET_EDI_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
  "cert_pem": "string",
  "key_pem": "string"
}'

key + certificate are validated (parseable, not expired) before the atomic swap; in-flight requests finish with the identity they started with. The cert-expiry monitor tracks the new certificate immediately.

Request body

RotateAs2IdentityBody

cert_pem · string · required

X.509 certificate PEM.

key_pem · string · required

PKCS#8 private key PEM.

Response

No response body. Identity rotated.

Status codes

Code	Meaning
200	Identity rotated
403	Platform-admin credential required
422	Key/certificate invalid or expired

cURL

curl --request POST \
  --url 'https://edi.stateset.com/v1/as2/identity' \
  --header "Authorization: Bearer $STATESET_EDI_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
  "cert_pem": "string",
  "key_pem": "string"
}'