All Products
Search
Document Center

ApsaraMQ for MQTT:InactivateDeviceCertificate

Last Updated:Feb 26, 2025

Deregisters a device certificate. Device certificates are digital certificates issued to clients by certificate authority (CA) root certificates. When you connect an ApsaraMQ for MQTT client to an ApsaraMQ for MQTT broker, the broker uses the device certificate to authenticate the client. If the client passes the authentication, the client and the broker can communicate with each other based on the encrypted private key in the device certificate. If the client fails the authentication, access requests from the client are denied by the client.

Operation description

  • Only ApsaraMQ for MQTT Enterprise Platinum Edition instances support this operation.
  • You can call this operation up to 500 times per second per Alibaba Cloud account. If you want to increase the limit, join the DingTalk group (ID: 35228338) to contact ApsaraMQ for MQTT technical support.

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
MqttInstanceIdstringYes

The ID of the ApsaraMQ for MQTT instance to which the device certificate that you want to deregister is bound.

post-cn-7mz2d******
DeviceSnstringYes

The serial number of the device certificate that you want to deregister. The serial number is the unique identifier of a device.

356217374433******
CaSnstringYes

The serial number of the CA certificate to which the device certificate that you want to deregister belongs. The serial number is the unique identifier of a CA certificate.

The serial number of a CA certificate cannot exceed 128 bytes in size.

007269004887******

Response parameters

ParameterTypeDescriptionExample
object

The response parameters.

RequestIdstring

The request ID.

020F6A43-19E6-4B6E-B846-44EB31DF****
DeviceSnstring

The serial number of the device certificate that is deregistered. The serial number is the unique identifier of a device certificate.

356217374433******

Examples

Sample success responses

JSONformat

{
  "RequestId": "020F6A43-19E6-4B6E-B846-44EB31DF****",
  "DeviceSn": "356217374433******"
}

Error codes

HTTP status codeError codeError message
400ParameterFieldCheckFailedFailed to validate the parameters. The parameters may be missing or invalid.
500FindDeviceBySnErrorFailed to find the device certificate by the SN. Please check sn is valid
500MqttInstanceNotFoundSpecified instance is not found
500MqttOwnerCheckErrorFailed to validate the instance permission

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2022-08-24Add OperationView Change Details