> For the complete documentation index, see [llms.txt](https://emca.emudhra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://emca.emudhra.com/integrating-emca/rest-api-support.md).

# REST API Support

The emCA application provides REST APIs that enable integration with external systems for certificate and signing operations. It offers three categories of APIs: CA Management, Certificate Management, and eSign. These APIs support secure interactions, allow automation of key processes, and adhere to industry standards.

Detailed specifications and usage examples for each API type are available in the Postman documentation, accessible through the provided links.

**Authentication** for the emCA REST API v5.0.0 is handled via **JWT (JSON Web Token)**. A token must be obtained once and then included in every subsequent API request as the **`X-Emca-Api-Key`** header.

[Postman Link for Authentication API](https://documenter.getpostman.com/view/40123569/2sBXqDuPtp#b5fc84cf-1008-4137-98a7-a50fcf1549a2)

#### **CA Management API**

The CA Management APIs enable core functions of a Certifying Authority, including certificate issuance, renewal, revocation, and validation. They support RSA and ECC algorithms, follow industry standards for security and interoperability, and allow integration with existing systems for automated certificate lifecycle management

[Postman Link for CA Management APIs](https://documenter.getpostman.com/view/40123569/2sBXqDuPtp#bcc10c65-ac6c-4ec9-a2a2-9eb576f75e0d)

#### **Certificate Management API**

The Certificate Management APIs cover the complete lifecycle of digital certificates, from issuance and renewal to revocation and validation. They are designed to integrate with existing systems, support RSA and ECC algorithms, and comply with industry standards for secure and reliable PKI operations.

[Postman Link for Certificate Management APIs](https://documenter.getpostman.com/view/40123569/2sBXqDuPtp#261138d1-c52a-40d8-89b0-67a0ce078115)

#### **OCSP Management APIs** 

provide a programmatic interface for managing the Online Certificate Status Protocol (OCSP) infrastructure within the emCA platform. These APIs allow administrators to create OCSP responder certificates, map OCSP certificates to CAs, revoke OCSP certificates, and configure OCSP response caching.

[Postman Link for OCSP Certificate Management API](https://documenter.getpostman.com/view/40123569/2sBXqDuPtp#336dee9c-1347-4c51-9dc1-4a2df522db04)

#### **Backup Management APIs** 

Provide a secure and programmatic interface for managing the backup lifecycle of the application's critical components, including configuration files and databases. These APIs enable both automated and manual control over backup operations to support disaster recovery, compliance, and operational resilience.

They are designed for use by administrators or authorized external applications and can be easily integrated into enterprise backup workflows or third-party management systems.

[Postman Link for OCSP Certificate Management API](https://documenter.getpostman.com/view/40123569/2sBXqDuPtp#664f4b03-367d-48ee-90fa-0cedee2ea7b3)

#### **eSign APIs**

The eSign APIs allow signing of document hashes with user registration and authentication based on unique IDs. They provide secure, programmatic access and can be integrated into existing systems for electronic signing processes.

[Postman Link for eSign APIs](https://documenter.getpostman.com/view/28084851/2sA3e1CAqy)

For API release notes and Postman documentation related to older versions, please refer to the respective Previous Release Versions section.