CreateEabCredential

Available in Classic and VPC

Issue the External Account Binding (EAB) credentials to integrate the ACME client.

Request

This section describes the request format. The method and URI are as follows:

Method	URI
POST	/api/v2/acme/account

Request headers

For information about the headers common to all Certificate Manager APIs, see Certificate Manager request headers.

Request body

You can include the following data in the body of your request:

Field	Type	Required	Description
`validationMode`	String	Required	Validation mode `PRE` \| `DNS01`
`certificateTypeCode`	String	Required	Certificate type `NPD_01` \| `NPO_01`
`validityDays`	Integer	Required	Certificate validity period (day)
`alias`	String	Required	ACME account alias
`organizationNo`	String	Conditional	Organization number Required if `certificateTypeCode` is `NPO_01`

Request example

The request example is as follows:

curl --location --request POST 'https://certificatemanager.apigw.ntruss.com/api/v2/acme/account' \
--header 'x-ncp-apigw-timestamp: {Timestamp}' \
--header 'x-ncp-iam-access-key: {Access Key}' \
--header 'x-ncp-apigw-signature-v2: {API Gateway Signature}' \
--header 'Content-Type: application/json' \
--header 'accept: application/json' \
--data '{
  "validationMode": "PRE",
  "certificateTypeCode": "NPD_01",
  "validityDays": 198,
  "alias": "my-acme-account"
}'

Response

This section describes the response format.

Response body

The response body includes the following data:

Field	Type	Required	Description
`returnCode`	String	-	Response code Success: `0`
`returnMessage`	String	-	Response message
`totalRows`	Integer	-	Total number of lists searched
`success`	Boolean	-	Creation success status
`message`	String	-	Business message
`accountId`	Long	-	ACME account ID
`status`	String	-	Account status `pending` \| `valid` `pending`: After EAB issuance but before ACME server registration `valid`: ACME server registration complete
`eabKid`	String	-	EAB Key ID
`eabHmacKey`	String	-	EAB HMAC Key
`acmeDirectoryUrl`	String	-	ACME directory URL
`eabExpireAt`	String	-	EAB expiration date and time (ISO-8601 format)

Response status codes

For information about the HTTP status codes common to all Certificate Manager APIs, see Certificate Manager response status codes.

Response example

The response example is as follows:

{
  "returnCode": "0",
  "returnMessage": "SUCCESS",
  "totalRows": 0,
  "success": true,
  "message": "Account and EAB credentials created successfully",
  "accountId": 50123,
  "status": "pending",
  "eabKid": "eab_7f3c2af1b9",
  "eabHmacKey": "uQx2kJp3A8Yz....",
  "acmeDirectoryUrl": "https://ra-beta.example.com/acme/directory",
  "eabExpireAt": "2026-05-20T09:00:00"
}