---
title: "OV/EV SSL: Generate DCV token"
source_url: https://dev.digicert.com/certcentral-apis/services-api/domains/ov-ev-ssl-generate-dcv-token.html
api_method: POST
api_endpoint: "/services/v2/domain/{{domain_id}}/dcv/token"
api_url: "https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token"
---

**POST** `https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token`

Use this endpoint to generate a new domain control validation (DCV) random value for the domain. Use this random value to validate the domain using the DCV method set for the domain.

To use this endpoint, the DCV method for the domain must be set to `dns-txt-token`, `dns-cname-token`, or `http-token`. To change the domain's DCV method, use the [Change domain DCV method](https://dev.digicert.com/md/certcentral-apis/services-api/domains/change-dcv-method.md) API endpoint

To get the existing domain random value instead of generating a new one, use the [Domain info](https://dev.digicert.com/md/certcentral-apis/services-api/domains/domain-info.md) endpoint.

## DCV random values for domains vs. orders

This endpoint generates a new random value for the domain. This is the *domain* random value. You can only use the domain random value to complete the DCV check for the given domain.


> **Warning**
>
> Generating a new domain random value invalidates the domain random value previously generated for the given domain.


When you place an OV or EV TLS order using a DCV method that requires a random value, DigiCert generates a single random value for the entire order. This is the *order* random value. You can use the order random value to complete the DCV check for any domain submitted with the order.


> **Tip**
>
> Order random values remain valid even when you generate a new domain random value.


When requesting a DCV check, you can use either check DCV endpoint: [Check order DCV](https://dev.digicert.com/md/certcentral-apis/services-api/orders/dv-ssl-check-dcv.md) or [Check domain DCV](https://dev.digicert.com/md/certcentral-apis/services-api/domains/ov-ev-ssl-check-dcv.md). If DigiCert finds a valid random value on the domain, the DCV check is completed, regardless of whether the random value is for the domain or the order.

## Example requests and responses

**cURL**

```bash
curl --request POST 'https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token' \
--header 'X-DC-DEVKEY: {{api_key}}'
```

**Python**

```python
import requests
import json

url = "https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token"

payload={}
headers = {
  'X-DC-DEVKEY': {{api_key}}
}

response = requests.request("POST", url, headers=headers, data=payload)

print(response.text)
```

**Go**

```go
package main

import (
		"fmt"
		"net/http"
		"io/ioutil"
)

func main() {

		url := "https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token"
		method := "POST"

		client := &http.Client {
		}
		req, err := http.NewRequest(method, url, nil)

		if err != nil {
				fmt.Println(err)
				return
		}
		req.Header.Add("X-DC-DEVKEY", {{api_key}})

		res, err := client.Do(req)
		if err != nil {
				fmt.Println(err)
				return
		}
		defer res.Body.Close()

		body, err := ioutil.ReadAll(res.Body)
		if err != nil {
				fmt.Println(err)
				return
		}
		fmt.Println(string(body))
}
```

**NodeJS**

```javascript
var request = require('request');
var options = {
  'method': 'POST',
  'url': 'https://www.digicert.com/services/v2/domain/{{domain_id}}/dcv/token',
  'headers': {
    'X-DC-DEVKEY': {{api_key}}
  }
};
request(options, function (error, response) {
  if (error) throw new Error(error);
  console.log(response.body);
});
```


**200 OK (dns-txt-token)**

```json
{
    "token": "fdy6m0wy5lq063sz4h0r6qmdt722gyfc",
    "expiration_date": "2020-08-22T20:21:10+00:00"
}
```

**200 OK (http-token)**

```json
{
    "token": "47xj51xh3776thgjgtgq99qw7gy6sx8d",
    "expiration_date": "2020-08-22T19:48:22+00:00",
    "http_token_url": "http://example.com/.well-known/pki-validation/fileauth.txt",
    "verification_value": "http://example.com/.well-known/pki-validation/fileauth.txt"
}
```

**200 OK (dns-cname-token)**

```json
{
    "token": "vq4k16kwn69rjxgfw4hf2xn8b36ht119",
    "expiration_date": "2020-08-22T20:22:26+00:00",
    "verification_value": "dcv.digicert.com"
}
```

**400 Bad Request (email)**

```json
{
  "errors": [
    {
      "code": "invalid_dcv_method",
      "message": "This domain's DCV method is set incorrectly for this action."
    }
  ]
}
```


## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Opt/Req</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>validations <strong>Deprecated<sup>*</sup></strong></td>
<td>ignored</td>
<td>array</td>
<td>List of validation types for the domain.<br><sup>*</sup><strong>Note:</strong> DigiCert has deprecated the <code>validations</code> request parameter.</td>
</tr>
<tr>
<td>.. type</td>
<td>ignored</td>
<td>string</td>
<td>Validation type identifier. See Glossary – Validation types.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>token</td>
<td>string</td>
<td>Random value used to validate domain control for domains using the <code>dns-txt-token</code>, <code>http-token</code>, or <code>dns-cname-token</code> DCV methods.</td>
</tr>
<tr>
<td>expiration_date</td>
<td>string</td>
<td>Date and time when the random value expires.<br>Format: UTC timezone and ISO 8601 date</td>
</tr>
<tr>
<td>http_token_url</td>
<td>string</td>
<td>For domains using the <code>http-token</code> DCV method, the URL path where the fileauth.txt file should be placed on the web server. Not returned for domains using other DCV methods.</td>
</tr>
<tr>
<td>verification_value</td>
<td>string</td>
<td>For domains using the <code>dns-cname-token</code> DCV method, the base domain used to construct the CNAME record target. The final target is formed by prepending the DCV token to this value (for example, <code>{token}.dcv.digicert.com</code>). For more information, see <a href="https://docs.digicert.com/en/certcentral/manage-certificates/supported-dcv-methods-for-validating-the-domains-on-ov-ev-tls-ssl-certificate-orders/use-the-dns-cname-validation-method-to-verify-domain-control.html#idm46650633349120" target="_blank" rel="noopener noreferrer">Use the DNS CNAME validation method to verify domain control</a>.<br>For domains using the <code>http-token</code> DCV method, the URL path where the fileauth.txt file should be placed on the web server.<br>Not returned for domains using the dns-txt-token DCV method.</td>
</tr>
</tbody>
</table>