TrustStore

Trust store that contains trust anchors and optional intermediate CAs used in PKI to build a trust chain(trust hierarchy) and verify a client's identity.

JSON representation 
{
  "trustAnchors": [
    {
      object (TrustAnchor)
    }
  ],
  "intermediateCas": [
    {
      object (IntermediateCA)
    }
  ],
  "trustDefaultSharedCa": boolean
}
Fields
trustAnchors[]

object (TrustAnchor)

Required. List of trust anchors to be used while performing validation against a given TrustStore. The incoming end entity's certificate must be in the trust chain of one of the trust anchors here.
intermediateCas[]

object (IntermediateCA)

Optional. Set of intermediate CA certificates used for building the trust chain to the trust anchor. Important: Intermediate CAs are only supported for X.509 federation.
trustDefaultSharedCa

boolean

Optional. Determines whether the trust bundle includes the private CA managed identity regional root public certificates. Important: trustDefaultSharedCa is only supported for managed identity trust domain resource.

TrustAnchor

Represents a root of trust.

JSON representation 
{

  // The following is a list of mutually exclusive fields. At most one of the
  // fields will be set in a response:
  "pemCertificate": string
  // End of mutually exclusive fields.
}
Fields
The following is a list of mutually exclusive fields. At most one of the fields will be set in a response:
pemCertificate

string

PEM certificate of the PKI used for validation. Must only contain one ca certificate (either root or intermediate cert).
End of mutually exclusive fields.

IntermediateCA

Intermediate CA certificates used for building the trust chain to trust anchor

JSON representation 
{

  // The following is a list of mutually exclusive fields. At most one of the
  // fields will be set in a response:
  "pemCertificate": string
  // End of mutually exclusive fields.
}
Fields
The following is a list of mutually exclusive fields. At most one of the fields will be set in a response:
pemCertificate

string

PEM certificate of the PKI used for validation. Must only contain one ca certificate.
End of mutually exclusive fields.