Stay organized with collections
Save and categorize content based on your preferences.
Update certificate authorities
This page explains how you can update the configuration for a certificate
authority (CA).
Update labels on a CA
Console
-
In the Google Cloud console, go to the Certificate authoritiespage.
Go to Certificate authorities
-
Under Certificate authorities, pick your target CA.
- In the Summarysection, click Edit.
- Click Add labels.
- In the panel on the right side, click Add Item.
- Add the Keyand Valuefor your label.
- Click Save.
gcloud
gcloud privateca roots update CA_NAME
--location LOCATION
--pool POOL_NAME
--update-labels foo=bar
Where:
- CA_NAME
: the unique identifier of the CA.
- LOCATION
: the location of the certificate authority.
- POOL_NAME
: the unique identifier of the CA pool.
-
--update-labels
flag mentions the key-value pairs to update.
For more information about the gcloud privateca roots update
command, see gcloud privateca roots
update
.
What's next
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License
, and code samples are licensed under the Apache 2.0 License
. For details, see the Google Developers Site Policies
. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-09-04 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis guide explains the process of updating the configuration for a certificate authority (CA).\u003c/p\u003e\n"],["\u003cp\u003eYou can update labels on a CA through the Google Cloud console by navigating to the Certificate authorities page, selecting your target CA, and editing the labels in the Summary section.\u003c/p\u003e\n"],["\u003cp\u003eThe gcloud command \u003ccode\u003egcloud privateca roots update\u003c/code\u003e can be used to update labels on a CA, specifying the CA name, location, pool name, and key-value pairs for the updated labels.\u003c/p\u003e\n"],["\u003cp\u003eThe required parameters for the \u003ccode\u003egcloud\u003c/code\u003e command include the CA's unique identifier (\u003ccode\u003eCA_NAME\u003c/code\u003e), its location (\u003ccode\u003eLOCATION\u003c/code\u003e), the CA pool's identifier (\u003ccode\u003ePOOL_NAME\u003c/code\u003e), and the \u003ccode\u003e--update-labels\u003c/code\u003e flag.\u003c/p\u003e\n"]]],[],null,["# Update certificate authorities\n==============================\n\nThis page explains how you can update the configuration for a certificate\nauthority (CA).\n\nUpdate labels on a CA\n---------------------\n\n### Console\n\n1. In the Google Cloud console, go to the **Certificate authorities** page.\n\n [Go to Certificate authorities](https://console.cloud.google.com/security/cas/certificateAuthorities)\n2. Under **Certificate authorities**, pick your target CA.\n\n 1. In the **Summary** section, click **Edit**.\n 2. Click **Add labels**.\n 3. In the panel on the right side, click **Add Item**.\n 4. Add the **Key** and **Value** for your label.\n 5. Click **Save**.\n\n### gcloud\n\n gcloud privateca roots update \u003cvar translate=\"no\"\u003eCA_NAME\u003c/var\u003e --location \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e --pool \u003cvar translate=\"no\"\u003ePOOL_NAME\u003c/var\u003e --update-labels foo=bar\n\nWhere:\n\n- \u003cvar translate=\"no\"\u003eCA_NAME\u003c/var\u003e: the unique identifier of the CA.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: the location of the certificate authority.\n- \u003cvar translate=\"no\"\u003ePOOL_NAME\u003c/var\u003e: the unique identifier of the CA pool.\n- `--update-labels` flag mentions the key-value pairs to update.\n\nFor more information about the `gcloud privateca roots update` command, see\n[gcloud privateca roots\nupdate](/sdk/gcloud/reference/privateca/roots/update).\n\nWhat's next\n-----------\n\n- Learn how to [manage the CA state](/certificate-authority-service/docs/managing-ca-state).\n- Learn how to [delete CAs](/certificate-authority-service/docs/deleting-certificate-authorities)."]]