<!-- WARNING: This documentation is auto-generated from the confluentinc/cli repository and should not be manually edited. -->

<a id="confluent-iam-certificate-authority-update"></a>

# confluent iam certificate-authority update

## Description

Update a certificate authority.

```none
confluent iam certificate-authority update <id> [flags]
```

## Flags

```none
    --name string                         Name of the certificate authority.
    --description string                  Description of the certificate authority.
    --certificate-chain string            A base64 encoded string containing the signing certificate chain.
    --certificate-chain-filename string   The name of the certificate file.
    --crl-url string                      The URL from which to fetch the CRL (Certificate Revocation List) for the certificate authority.
    --crl-chain string                    A base64 encoded string containing the CRL for this certificate authority.
    --require-crl-on-client-certificate   Require CRL validation on client certificates.
    --context string                      CLI context name.
-o, --output string                       Specify the output format as "human", "json", or "yaml". (default "human")
```

## Global Flags

```none
-h, --help            Show help for this command.
    --unsafe-trace    Equivalent to -vvvv, but also log HTTP requests and responses which might contain plaintext secrets.
-v, --verbose count   Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace).
```

## Examples

Update the certificate chain for certificate authority “op-123456” using the certificate chain stored in the “CERTIFICATE_CHAIN” environment variable:

```none
confluent iam certificate-authority update op-123456 --certificate-chain $CERTIFICATE_CHAIN --certificate-chain-filename certificate.pem
```

## See Also

* [confluent iam certificate-authority](index.md#confluent-iam-certificate-authority) - Manage certificate authorities.