1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementSubordinateCa
checkpoint 2.12.0 published on Monday, Nov 10, 2025 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementSubordinateCa

checkpoint logo
checkpoint 2.12.0 published on Monday, Nov 10, 2025 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

    This resource allows you to execute Check Point Subordinate CA.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementSubordinateCa("example", {
    name: "TestSubordinateCa",
    base64Certificate: "MIICwjCCAaqgAwIBAgIILdexblpVEMIwDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UEAxMNd3d3Lm9wc2VjLmNvbTAeFw0yMzA2MjUwOTE3MDBaFw0yNTAzMzExNjAwMDBaMBgxFjAUBgNVBAMTDXd3dy5vcHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpqCxDaVg+I1b+wqnmjjYtL3v7Tlu/YpMbsKnv+M1gRz6QFUOoSVnxKLo0A7Y4kCqa1OPcHO/LtXuok43F1YZPVKm3xWpY8FmqGqf5ZuGmSwm1HPObcMjwGOyFgwpwEDF5e0UMZ7xtJF8BZ5KKBh3ZfQ1FbmbVqSUPcmOi+NE4JspPlHxX+m6es/yeSGR1A2ezKY7KePTlwVtDe8hiLrYyKG92nka5rkD1QyEIVJ0W5wrnU4nGEDIHeOfT09zroQxaNLkb51sl4Tog/qw+EraVGIBe/iFnSJoDF37i2mLJqI/t8bel+aGDAxgMx1pO85OClgjPSWL0UIXGI2xrR+JAgMBAAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHTs1AutAmSLHF2KRLJtrRNkso0lMyA7XI7k1TNpTk7TCZLNY0VbUliGbcl+POH4EG8ARUrftnwRDCTBd2BdJTqG2CyNADi+bw8aLvbxok7KH0GlQvGjyfq+sHK12wTl4ULNyYoAPZ01GhXOvkobROdSyjxvBVhxdVo90kj7mHFv3N83huNhfstDFUBcQCmMkbLuzDUZrl2a1OtqlOdNC6mNvb7Jq9W9vRxGA514e7jqyoM+PwHu5fILx/jmGT8suOUnvbtcDdFhjqixAPer6uSPR0CSbiJvuDy72DPH5mjZK5dQKewNYOZ/BQEsRIBe+Q6eGAoJqi+cD63cwlw0DCc=",
});

    import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementSubordinateCa("example",
    name="TestSubordinateCa",
    base64_certificate="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")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementSubordinateCa(ctx, "example", &checkpoint.ManagementSubordinateCaArgs{
			Name:              pulumi.String("TestSubordinateCa"),
			Base64Certificate: pulumi.String("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"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementSubordinateCa("example", new()
    {
        Name = "TestSubordinateCa",
        Base64Certificate = "MIICwjCCAaqgAwIBAgIILdexblpVEMIwDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UEAxMNd3d3Lm9wc2VjLmNvbTAeFw0yMzA2MjUwOTE3MDBaFw0yNTAzMzExNjAwMDBaMBgxFjAUBgNVBAMTDXd3dy5vcHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpqCxDaVg+I1b+wqnmjjYtL3v7Tlu/YpMbsKnv+M1gRz6QFUOoSVnxKLo0A7Y4kCqa1OPcHO/LtXuok43F1YZPVKm3xWpY8FmqGqf5ZuGmSwm1HPObcMjwGOyFgwpwEDF5e0UMZ7xtJF8BZ5KKBh3ZfQ1FbmbVqSUPcmOi+NE4JspPlHxX+m6es/yeSGR1A2ezKY7KePTlwVtDe8hiLrYyKG92nka5rkD1QyEIVJ0W5wrnU4nGEDIHeOfT09zroQxaNLkb51sl4Tog/qw+EraVGIBe/iFnSJoDF37i2mLJqI/t8bel+aGDAxgMx1pO85OClgjPSWL0UIXGI2xrR+JAgMBAAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHTs1AutAmSLHF2KRLJtrRNkso0lMyA7XI7k1TNpTk7TCZLNY0VbUliGbcl+POH4EG8ARUrftnwRDCTBd2BdJTqG2CyNADi+bw8aLvbxok7KH0GlQvGjyfq+sHK12wTl4ULNyYoAPZ01GhXOvkobROdSyjxvBVhxdVo90kj7mHFv3N83huNhfstDFUBcQCmMkbLuzDUZrl2a1OtqlOdNC6mNvb7Jq9W9vRxGA514e7jqyoM+PwHu5fILx/jmGT8suOUnvbtcDdFhjqixAPer6uSPR0CSbiJvuDy72DPH5mjZK5dQKewNYOZ/BQEsRIBe+Q6eGAoJqi+cD63cwlw0DCc=",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementSubordinateCa;
import com.pulumi.checkpoint.ManagementSubordinateCaArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementSubordinateCa("example", ManagementSubordinateCaArgs.builder()
            .name("TestSubordinateCa")
            .base64Certificate("MIICwjCCAaqgAwIBAgIILdexblpVEMIwDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UEAxMNd3d3Lm9wc2VjLmNvbTAeFw0yMzA2MjUwOTE3MDBaFw0yNTAzMzExNjAwMDBaMBgxFjAUBgNVBAMTDXd3dy5vcHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpqCxDaVg+I1b+wqnmjjYtL3v7Tlu/YpMbsKnv+M1gRz6QFUOoSVnxKLo0A7Y4kCqa1OPcHO/LtXuok43F1YZPVKm3xWpY8FmqGqf5ZuGmSwm1HPObcMjwGOyFgwpwEDF5e0UMZ7xtJF8BZ5KKBh3ZfQ1FbmbVqSUPcmOi+NE4JspPlHxX+m6es/yeSGR1A2ezKY7KePTlwVtDe8hiLrYyKG92nka5rkD1QyEIVJ0W5wrnU4nGEDIHeOfT09zroQxaNLkb51sl4Tog/qw+EraVGIBe/iFnSJoDF37i2mLJqI/t8bel+aGDAxgMx1pO85OClgjPSWL0UIXGI2xrR+JAgMBAAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHTs1AutAmSLHF2KRLJtrRNkso0lMyA7XI7k1TNpTk7TCZLNY0VbUliGbcl+POH4EG8ARUrftnwRDCTBd2BdJTqG2CyNADi+bw8aLvbxok7KH0GlQvGjyfq+sHK12wTl4ULNyYoAPZ01GhXOvkobROdSyjxvBVhxdVo90kj7mHFv3N83huNhfstDFUBcQCmMkbLuzDUZrl2a1OtqlOdNC6mNvb7Jq9W9vRxGA514e7jqyoM+PwHu5fILx/jmGT8suOUnvbtcDdFhjqixAPer6uSPR0CSbiJvuDy72DPH5mjZK5dQKewNYOZ/BQEsRIBe+Q6eGAoJqi+cD63cwlw0DCc=")
            .build());

    }
}

    resources:
  example:
    type: checkpoint:ManagementSubordinateCa
    properties:
      name: TestSubordinateCa
      base64Certificate: MIICwjCCAaqgAwIBAgIILdexblpVEMIwDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UEAxMNd3d3Lm9wc2VjLmNvbTAeFw0yMzA2MjUwOTE3MDBaFw0yNTAzMzExNjAwMDBaMBgxFjAUBgNVBAMTDXd3dy5vcHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpqCxDaVg+I1b+wqnmjjYtL3v7Tlu/YpMbsKnv+M1gRz6QFUOoSVnxKLo0A7Y4kCqa1OPcHO/LtXuok43F1YZPVKm3xWpY8FmqGqf5ZuGmSwm1HPObcMjwGOyFgwpwEDF5e0UMZ7xtJF8BZ5KKBh3ZfQ1FbmbVqSUPcmOi+NE4JspPlHxX+m6es/yeSGR1A2ezKY7KePTlwVtDe8hiLrYyKG92nka5rkD1QyEIVJ0W5wrnU4nGEDIHeOfT09zroQxaNLkb51sl4Tog/qw+EraVGIBe/iFnSJoDF37i2mLJqI/t8bel+aGDAxgMx1pO85OClgjPSWL0UIXGI2xrR+JAgMBAAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHTs1AutAmSLHF2KRLJtrRNkso0lMyA7XI7k1TNpTk7TCZLNY0VbUliGbcl+POH4EG8ARUrftnwRDCTBd2BdJTqG2CyNADi+bw8aLvbxok7KH0GlQvGjyfq+sHK12wTl4ULNyYoAPZ01GhXOvkobROdSyjxvBVhxdVo90kj7mHFv3N83huNhfstDFUBcQCmMkbLuzDUZrl2a1OtqlOdNC6mNvb7Jq9W9vRxGA514e7jqyoM+PwHu5fILx/jmGT8suOUnvbtcDdFhjqixAPer6uSPR0CSbiJvuDy72DPH5mjZK5dQKewNYOZ/BQEsRIBe+Q6eGAoJqi+cD63cwlw0DCc=

    Create ManagementSubordinateCa Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementSubordinateCa(name: string, args: ManagementSubordinateCaArgs, opts?: CustomResourceOptions);
    @overload
def ManagementSubordinateCa(resource_name: str,
                            args: ManagementSubordinateCaArgs,
                            opts: Optional[ResourceOptions] = None)

@overload
def ManagementSubordinateCa(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            base64_certificate: Optional[str] = None,
                            automatic_enrollment: Optional[ManagementSubordinateCaAutomaticEnrollmentArgs] = None,
                            color: Optional[str] = None,
                            comments: Optional[str] = None,
                            groups: Optional[Sequence[str]] = None,
                            ignore_errors: Optional[bool] = None,
                            ignore_warnings: Optional[bool] = None,
                            management_subordinate_ca_id: Optional[str] = None,
                            name: Optional[str] = None,
                            tags: Optional[Sequence[str]] = None)
    func NewManagementSubordinateCa(ctx *Context, name string, args ManagementSubordinateCaArgs, opts ...ResourceOption) (*ManagementSubordinateCa, error)
    public ManagementSubordinateCa(string name, ManagementSubordinateCaArgs args, CustomResourceOptions? opts = null)
    public ManagementSubordinateCa(String name, ManagementSubordinateCaArgs args)
public ManagementSubordinateCa(String name, ManagementSubordinateCaArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementSubordinateCa
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ManagementSubordinateCaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementSubordinateCaArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementSubordinateCaArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementSubordinateCaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementSubordinateCaArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementSubordinateCaResource = new Checkpoint.ManagementSubordinateCa("managementSubordinateCaResource", new()
{
    Base64Certificate = "string",
    AutomaticEnrollment = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentArgs
    {
        AutomaticallyEnrollCertificate = false,
        Cmpv1Settings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsArgs
        {
            DirectTcpSettings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettingsArgs
            {
                IpAddress = "string",
                Port = 0,
            },
        },
        Cmpv2Settings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsArgs
        {
            DirectTcpSettings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettingsArgs
            {
                IpAddress = "string",
                Port = 0,
            },
            HttpSettings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettingsArgs
            {
                Url = "string",
            },
            TransportLayer = "string",
        },
        Protocol = "string",
        ScepSettings = new Checkpoint.Inputs.ManagementSubordinateCaAutomaticEnrollmentScepSettingsArgs
        {
            CaIdentifier = "string",
            Url = "string",
        },
    },
    Color = "string",
    Comments = "string",
    Groups = new[]
    {
        "string",
    },
    IgnoreErrors = false,
    IgnoreWarnings = false,
    ManagementSubordinateCaId = "string",
    Name = "string",
    Tags = new[]
    {
        "string",
    },
});

    example, err := checkpoint.NewManagementSubordinateCa(ctx, "managementSubordinateCaResource", &checkpoint.ManagementSubordinateCaArgs{
	Base64Certificate: pulumi.String("string"),
	AutomaticEnrollment: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentArgs{
		AutomaticallyEnrollCertificate: pulumi.Bool(false),
		Cmpv1Settings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsArgs{
			DirectTcpSettings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettingsArgs{
				IpAddress: pulumi.String("string"),
				Port:      pulumi.Float64(0),
			},
		},
		Cmpv2Settings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsArgs{
			DirectTcpSettings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettingsArgs{
				IpAddress: pulumi.String("string"),
				Port:      pulumi.Float64(0),
			},
			HttpSettings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettingsArgs{
				Url: pulumi.String("string"),
			},
			TransportLayer: pulumi.String("string"),
		},
		Protocol: pulumi.String("string"),
		ScepSettings: &checkpoint.ManagementSubordinateCaAutomaticEnrollmentScepSettingsArgs{
			CaIdentifier: pulumi.String("string"),
			Url:          pulumi.String("string"),
		},
	},
	Color:    pulumi.String("string"),
	Comments: pulumi.String("string"),
	Groups: pulumi.StringArray{
		pulumi.String("string"),
	},
	IgnoreErrors:              pulumi.Bool(false),
	IgnoreWarnings:            pulumi.Bool(false),
	ManagementSubordinateCaId: pulumi.String("string"),
	Name:                      pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var managementSubordinateCaResource = new ManagementSubordinateCa("managementSubordinateCaResource", ManagementSubordinateCaArgs.builder()
    .base64Certificate("string")
    .automaticEnrollment(ManagementSubordinateCaAutomaticEnrollmentArgs.builder()
        .automaticallyEnrollCertificate(false)
        .cmpv1Settings(ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsArgs.builder()
            .directTcpSettings(ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettingsArgs.builder()
                .ipAddress("string")
                .port(0.0)
                .build())
            .build())
        .cmpv2Settings(ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsArgs.builder()
            .directTcpSettings(ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettingsArgs.builder()
                .ipAddress("string")
                .port(0.0)
                .build())
            .httpSettings(ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettingsArgs.builder()
                .url("string")
                .build())
            .transportLayer("string")
            .build())
        .protocol("string")
        .scepSettings(ManagementSubordinateCaAutomaticEnrollmentScepSettingsArgs.builder()
            .caIdentifier("string")
            .url("string")
            .build())
        .build())
    .color("string")
    .comments("string")
    .groups("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .managementSubordinateCaId("string")
    .name("string")
    .tags("string")
    .build());

    management_subordinate_ca_resource = checkpoint.ManagementSubordinateCa("managementSubordinateCaResource",
    base64_certificate="string",
    automatic_enrollment={
        "automatically_enroll_certificate": False,
        "cmpv1_settings": {
            "direct_tcp_settings": {
                "ip_address": "string",
                "port": 0,
            },
        },
        "cmpv2_settings": {
            "direct_tcp_settings": {
                "ip_address": "string",
                "port": 0,
            },
            "http_settings": {
                "url": "string",
            },
            "transport_layer": "string",
        },
        "protocol": "string",
        "scep_settings": {
            "ca_identifier": "string",
            "url": "string",
        },
    },
    color="string",
    comments="string",
    groups=["string"],
    ignore_errors=False,
    ignore_warnings=False,
    management_subordinate_ca_id="string",
    name="string",
    tags=["string"])

    const managementSubordinateCaResource = new checkpoint.ManagementSubordinateCa("managementSubordinateCaResource", {
    base64Certificate: "string",
    automaticEnrollment: {
        automaticallyEnrollCertificate: false,
        cmpv1Settings: {
            directTcpSettings: {
                ipAddress: "string",
                port: 0,
            },
        },
        cmpv2Settings: {
            directTcpSettings: {
                ipAddress: "string",
                port: 0,
            },
            httpSettings: {
                url: "string",
            },
            transportLayer: "string",
        },
        protocol: "string",
        scepSettings: {
            caIdentifier: "string",
            url: "string",
        },
    },
    color: "string",
    comments: "string",
    groups: ["string"],
    ignoreErrors: false,
    ignoreWarnings: false,
    managementSubordinateCaId: "string",
    name: "string",
    tags: ["string"],
});

    type: checkpoint:ManagementSubordinateCa
properties:
    automaticEnrollment:
        automaticallyEnrollCertificate: false
        cmpv1Settings:
            directTcpSettings:
                ipAddress: string
                port: 0
        cmpv2Settings:
            directTcpSettings:
                ipAddress: string
                port: 0
            httpSettings:
                url: string
            transportLayer: string
        protocol: string
        scepSettings:
            caIdentifier: string
            url: string
    base64Certificate: string
    color: string
    comments: string
    groups:
        - string
    ignoreErrors: false
    ignoreWarnings: false
    managementSubordinateCaId: string
    name: string
    tags:
        - string

    ManagementSubordinateCa Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementSubordinateCa resource accepts the following input properties:

    Base64Certificate string
    Certificate file encoded in base64.
    AutomaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    Groups List<string>
    Collection of group identifiers.groups blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementSubordinateCaId string
    Name string
    Object name.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    Base64Certificate string
    Certificate file encoded in base64.
    AutomaticEnrollment ManagementSubordinateCaAutomaticEnrollmentArgs
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    Groups []string
    Collection of group identifiers.groups blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementSubordinateCaId string
    Name string
    Object name.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    base64Certificate String
    Certificate file encoded in base64.
    automaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groups List<String>
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId String
    name String
    Object name.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    base64Certificate string
    Certificate file encoded in base64.
    automaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    groups string[]
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId string
    name string
    Object name.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    base64_certificate str
    Certificate file encoded in base64.
    automatic_enrollment ManagementSubordinateCaAutomaticEnrollmentArgs
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    groups Sequence[str]
    Collection of group identifiers.groups blocks are documented below.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_subordinate_ca_id str
    name str
    Object name.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    base64Certificate String
    Certificate file encoded in base64.
    automaticEnrollment Property Map
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groups List<String>
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId String
    name String
    Object name.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementSubordinateCa resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementSubordinateCa Resource

    Get an existing ManagementSubordinateCa resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementSubordinateCaState, opts?: CustomResourceOptions): ManagementSubordinateCa
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        automatic_enrollment: Optional[ManagementSubordinateCaAutomaticEnrollmentArgs] = None,
        base64_certificate: Optional[str] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        groups: Optional[Sequence[str]] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        management_subordinate_ca_id: Optional[str] = None,
        name: Optional[str] = None,
        tags: Optional[Sequence[str]] = None) -> ManagementSubordinateCa
    func GetManagementSubordinateCa(ctx *Context, name string, id IDInput, state *ManagementSubordinateCaState, opts ...ResourceOption) (*ManagementSubordinateCa, error)
    public static ManagementSubordinateCa Get(string name, Input<string> id, ManagementSubordinateCaState? state, CustomResourceOptions? opts = null)
    public static ManagementSubordinateCa get(String name, Output<String> id, ManagementSubordinateCaState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementSubordinateCa    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AutomaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    Base64Certificate string
    Certificate file encoded in base64.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    Groups List<string>
    Collection of group identifiers.groups blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementSubordinateCaId string
    Name string
    Object name.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    AutomaticEnrollment ManagementSubordinateCaAutomaticEnrollmentArgs
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    Base64Certificate string
    Certificate file encoded in base64.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    Groups []string
    Collection of group identifiers.groups blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementSubordinateCaId string
    Name string
    Object name.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    automaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    base64Certificate String
    Certificate file encoded in base64.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groups List<String>
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId String
    name String
    Object name.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    automaticEnrollment ManagementSubordinateCaAutomaticEnrollment
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    base64Certificate string
    Certificate file encoded in base64.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    groups string[]
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId string
    name string
    Object name.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    automatic_enrollment ManagementSubordinateCaAutomaticEnrollmentArgs
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    base64_certificate str
    Certificate file encoded in base64.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    groups Sequence[str]
    Collection of group identifiers.groups blocks are documented below.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_subordinate_ca_id str
    name str
    Object name.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    automaticEnrollment Property Map
    Certificate automatic enrollment. automatic_enrollment blocks are documented below.
    base64Certificate String
    Certificate file encoded in base64.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groups List<String>
    Collection of group identifiers.groups blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementSubordinateCaId String
    name String
    Object name.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.

    Supporting Types

    ManagementSubordinateCaAutomaticEnrollment, ManagementSubordinateCaAutomaticEnrollmentArgs

    AutomaticallyEnrollCertificate bool
    Whether to automatically enroll certificate.
    Cmpv1Settings ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    Cmpv2Settings ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    Protocol string
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    ScepSettings ManagementSubordinateCaAutomaticEnrollmentScepSettings
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.
    AutomaticallyEnrollCertificate bool
    Whether to automatically enroll certificate.
    Cmpv1Settings ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    Cmpv2Settings ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    Protocol string
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    ScepSettings ManagementSubordinateCaAutomaticEnrollmentScepSettings
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.
    automaticallyEnrollCertificate Boolean
    Whether to automatically enroll certificate.
    cmpv1Settings ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    cmpv2Settings ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    protocol String
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    scepSettings ManagementSubordinateCaAutomaticEnrollmentScepSettings
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.
    automaticallyEnrollCertificate boolean
    Whether to automatically enroll certificate.
    cmpv1Settings ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    cmpv2Settings ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    protocol string
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    scepSettings ManagementSubordinateCaAutomaticEnrollmentScepSettings
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.
    automatically_enroll_certificate bool
    Whether to automatically enroll certificate.
    cmpv1_settings ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    cmpv2_settings ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    protocol str
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    scep_settings ManagementSubordinateCaAutomaticEnrollmentScepSettings
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.
    automaticallyEnrollCertificate Boolean
    Whether to automatically enroll certificate.
    cmpv1Settings Property Map
    Cmpv1 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv1_settings blocks are documented below.
    cmpv2Settings Property Map
    Cmpv2 protocol settings. Available only if "protocol" is set to "cmpv1". cmpv2_settings blocks are documented below.
    protocol String
    Protocol that communicates with the certificate authority. Available only if "automatically-enroll-certificate" parameter is set to true.
    scepSettings Property Map
    Scep protocol settings. Available only if "protocol" is set to "scep". scep_settings blocks are documented below.

    ManagementSubordinateCaAutomaticEnrollmentCmpv1Settings, ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsArgs

    DirectTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    DirectTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    directTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    directTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    direct_tcp_settings ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    directTcpSettings Property Map
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.

    ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettings, ManagementSubordinateCaAutomaticEnrollmentCmpv1SettingsDirectTcpSettingsArgs

    IpAddress string
    Certificate authority IP address.
    Port double
    Port number.
    IpAddress string
    Certificate authority IP address.
    Port float64
    Port number.
    ipAddress String
    Certificate authority IP address.
    port Double
    Port number.
    ipAddress string
    Certificate authority IP address.
    port number
    Port number.
    ip_address str
    Certificate authority IP address.
    port float
    Port number.
    ipAddress String
    Certificate authority IP address.
    port Number
    Port number.

    ManagementSubordinateCaAutomaticEnrollmentCmpv2Settings, ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsArgs

    DirectTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    HttpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings
    Http transport layer settings. http_settings blocks are documented below.
    TransportLayer string
    Transport layer.
    DirectTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    HttpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings
    Http transport layer settings. http_settings blocks are documented below.
    TransportLayer string
    Transport layer.
    directTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    httpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings
    Http transport layer settings. http_settings blocks are documented below.
    transportLayer String
    Transport layer.
    directTcpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    httpSettings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings
    Http transport layer settings. http_settings blocks are documented below.
    transportLayer string
    Transport layer.
    direct_tcp_settings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    http_settings ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings
    Http transport layer settings. http_settings blocks are documented below.
    transport_layer str
    Transport layer.
    directTcpSettings Property Map
    Direct tcp transport layer settings. direct_tcp_settings blocks are documented below.
    httpSettings Property Map
    Http transport layer settings. http_settings blocks are documented below.
    transportLayer String
    Transport layer.

    ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettings, ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsDirectTcpSettingsArgs

    IpAddress string
    Certificate authority IP address.
    Port double
    Port number.
    IpAddress string
    Certificate authority IP address.
    Port float64
    Port number.
    ipAddress String
    Certificate authority IP address.
    port Double
    Port number.
    ipAddress string
    Certificate authority IP address.
    port number
    Port number.
    ip_address str
    Certificate authority IP address.
    port float
    Port number.
    ipAddress String
    Certificate authority IP address.
    port Number
    Port number.

    ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettings, ManagementSubordinateCaAutomaticEnrollmentCmpv2SettingsHttpSettingsArgs

    Url string
    Certificate authority URL.
    Url string
    Certificate authority URL.
    url String
    Certificate authority URL.
    url string
    Certificate authority URL.
    url str
    Certificate authority URL.
    url String
    Certificate authority URL.

    ManagementSubordinateCaAutomaticEnrollmentScepSettings, ManagementSubordinateCaAutomaticEnrollmentScepSettingsArgs

    CaIdentifier string
    Certificate authority identifier.
    Url string
    Certificate authority URL.
    CaIdentifier string
    Certificate authority identifier.
    Url string
    Certificate authority URL.
    caIdentifier String
    Certificate authority identifier.
    url String
    Certificate authority URL.
    caIdentifier string
    Certificate authority identifier.
    url string
    Certificate authority URL.
    ca_identifier str
    Certificate authority identifier.
    url str
    Certificate authority URL.
    caIdentifier String
    Certificate authority identifier.
    url String
    Certificate authority URL.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    checkpoint logo
    checkpoint 2.12.0 published on Monday, Nov 10, 2025 by checkpointsw
    Schema (JSON)
    checkpointsw/terraform-provider-checkpoint
      Meet Neo: Your AI Platform Teammate