Add IP restriction

Assign IP rules to the top-level account container

CertCentral assigns IP restrictions to the top-level container (division) in the account. This means, in the request URL, the value of the container_id path parameter must be the ID of the top-level account container.

Format IP addresses

Each IP rule restricts access either to a single IP address or to a range of allowed addresses. In your request, you must use IPv4 format for all IP addresses.

• Create a rule for a single IP address In the request payload, set the ip_address and ip_address_end request parameters to the same value, the allowed IP address:

  {
    "ip_address": "192.0.2.0",
    "ip_address_end": "192.0.2.0"
  }
  

• IP address range In the request payload, set the value of the ip_address request parameter to the starting IP address. Set the value of the ip_address_end request parameter to the ending IP address:

  {
    "ip_address": "192.0.2.0",
    "ip_address_end": "192.0.2.29"
  }
  

Choose a restriction type

You can add a rule that applies to all account access, or you can add a rule that only applies to a single user or API key.

New IP rules apply to all account access by default. To scope a rule to a single user or API key, use the user_id and api_key_id request parameters.

Example requests and responses

• Account wide restriction
• User restriction
• API key restriction

curl --request POST 'https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data '{
    "ip_address": "192.0.2.0",
    "ip_address_end": "192.0.2.24",
    "description": "Account-wide restriction"
}'

curl --request POST 'https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data '{
    "ip_address": "192.0.2.0",
    "ip_address_end": "192.0.2.24",
    "description": "User restriction",
    "user_id": "1234"
}'

curl --request POST 'https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data '{
    "ip_address": "192.0.2.0",
    "ip_address_end": "192.0.2.24",
    "description": "API key restriction",
    "api_key_id": "1234"
}'

204 No Content

// No content

Path parameters

Request parameters