An idiomatic C++ client library for theCertificate Authority API. The Certificate Authority Service API is a highly-available, scalable service that enables you to simplify and automate the management of private certificate authorities (CAs) while staying in control of your private keys.
While this library isGA, please note Google Cloud C++ client libraries donotfollowSemantic Versioning.
Quickstart
The following shows the code that you'll run in thegoogle/cloud/privateca/quickstart/directory, which should give you a taste of the Certificate Authority API C++ client library API.
The library automatically retries requests that fail with transient errors, and usesexponential backoffto backoff between retries. Application developers can override the default policies.
More Information
Error Handling- describes how the library reports errors.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis webpage provides documentation for the Certificate Authority API C++ client library, which is used to manage private certificate authorities.\u003c/p\u003e\n"],["\u003cp\u003eThe library version 2.37.0-rc is the latest release candidate, and multiple previous versions from 2.36.0 down to 2.11.0 are accessible via the provided links.\u003c/p\u003e\n"],["\u003cp\u003eThe library includes automatic retry and exponential backoff features for handling transient errors.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eprivateca_v1::CertificateAuthorityServiceClient\u003c/code\u003e class is the primary interface for interacting with the Certificate Authority API, and examples are provided for use.\u003c/p\u003e\n"],["\u003cp\u003eUsers can find information on error handling, overriding default endpoints and authentication credentials, and configuring the library's behavior via environment variables.\u003c/p\u003e\n"]]],[],null,["Version 2.12.0keyboard_arrow_down\n\n- [2.42.0-rc (latest)](/cpp/docs/reference/privateca/latest)\n- [2.41.0](/cpp/docs/reference/privateca/2.41.0)\n- [2.40.0](/cpp/docs/reference/privateca/2.40.0)\n- [2.39.0](/cpp/docs/reference/privateca/2.39.0)\n- [2.38.0](/cpp/docs/reference/privateca/2.38.0)\n- [2.37.0](/cpp/docs/reference/privateca/2.37.0)\n- [2.36.0](/cpp/docs/reference/privateca/2.36.0)\n- [2.35.0](/cpp/docs/reference/privateca/2.35.0)\n- [2.34.0](/cpp/docs/reference/privateca/2.34.0)\n- [2.33.0](/cpp/docs/reference/privateca/2.33.0)\n- [2.32.0](/cpp/docs/reference/privateca/2.32.0)\n- [2.31.0](/cpp/docs/reference/privateca/2.31.0)\n- [2.30.0](/cpp/docs/reference/privateca/2.30.0)\n- [2.29.0](/cpp/docs/reference/privateca/2.29.0)\n- [2.28.0](/cpp/docs/reference/privateca/2.28.0)\n- [2.27.0](/cpp/docs/reference/privateca/2.27.0)\n- [2.26.0](/cpp/docs/reference/privateca/2.26.0)\n- [2.25.1](/cpp/docs/reference/privateca/2.25.1)\n- [2.24.0](/cpp/docs/reference/privateca/2.24.0)\n- [2.23.0](/cpp/docs/reference/privateca/2.23.0)\n- [2.22.1](/cpp/docs/reference/privateca/2.22.1)\n- [2.21.0](/cpp/docs/reference/privateca/2.21.0)\n- [2.20.0](/cpp/docs/reference/privateca/2.20.0)\n- [2.19.0](/cpp/docs/reference/privateca/2.19.0)\n- [2.18.0](/cpp/docs/reference/privateca/2.18.0)\n- [2.17.0](/cpp/docs/reference/privateca/2.17.0)\n- [2.16.0](/cpp/docs/reference/privateca/2.16.0)\n- [2.15.1](/cpp/docs/reference/privateca/2.15.1)\n- [2.14.0](/cpp/docs/reference/privateca/2.14.0)\n- [2.13.0](/cpp/docs/reference/privateca/2.13.0)\n- [2.12.0](/cpp/docs/reference/privateca/2.12.0)\n- [2.11.0](/cpp/docs/reference/privateca/2.11.0) \n\nCertificate Authority API C++ Client Library\n============================================\n\nAn idiomatic C++ client library for the [Certificate Authority API](https://cloud.google.com/certificate-authority-service/docs). The Certificate Authority Service API is a highly-available, scalable service that enables you to simplify and automate the management of private certificate authorities (CAs) while staying in control of your private keys.\n\nWhile this library is **GA** , please note Google Cloud C++ client libraries do **not** follow [Semantic Versioning](https://semver.org/).\n\n### Quickstart\n\nThe following shows the code that you'll run in the `google/cloud/privateca/quickstart/` directory, which should give you a taste of the Certificate Authority API C++ client library API. \n\n #include \"google/cloud/privateca/v1/certificate_authority_client.h\"\n #include \u003ciostream\u003e\n\n int main(int argc, char* argv[]) try {\n if (argc != 3) {\n std::cerr \u003c\u003c \"Usage: \" \u003c\u003c argv[0] \u003c\u003c \" project-id location-id\\n\";\n return 1;\n }\n\n namespace privateca = ::google::cloud::privateca_v1;\n auto client = privateca::CertificateAuthorityServiceClient(\n privateca::MakeCertificateAuthorityServiceConnection());\n\n auto const ca_pool =\n \"projects/\" + std::string(argv[1]) + \"/locations/\" + std::string(argv[2]);\n for (auto r : client.ListCaPools(ca_pool)) {\n if (!r) throw std::move(r).status();\n std::cout \u003c\u003c r-\u003eDebugString() \u003c\u003c \"\\n\";\n }\n\n return 0;\n } catch (google::cloud::Status const& status) {\n std::cerr \u003c\u003c \"google::cloud::Status thrown: \" \u003c\u003c status \u003c\u003c \"\\n\";\n return 1;\n }\n\n### Main classes\n\nThe main class in this library is [`privateca_v1::CertificateAuthorityServiceClient`](/cpp/docs/reference/privateca/2.12.0/classgoogle_1_1cloud_1_1privateca__v1_1_1CertificateAuthorityServiceClient). All RPCs are exposed as member functions of this class. Other classes provide helpers, configuration parameters, and infrastructure to mock [`privateca_v1::CertificateAuthorityServiceClient`](/cpp/docs/reference/privateca/2.12.0/classgoogle_1_1cloud_1_1privateca__v1_1_1CertificateAuthorityServiceClient) when testing your application.\n\n### Retry, Backoff, and Idempotency Policies.\n\nThe library automatically retries requests that fail with transient errors, and uses [exponential backoff](https://en.wikipedia.org/wiki/Exponential_backoff) to backoff between retries. Application developers can override the default policies.\n\n### More Information\n\n- [Error Handling](https://cloud.google.com/cpp/docs/reference/common/latest/common-error-handling.html) - describes how the library reports errors.\n- [How to Override the Default Endpoint](/cpp/docs/reference/privateca/2.12.0/privateca-override-endpoint) - describes how to override the default endpoint.\n- [How to Override the Authentication Credentials](/cpp/docs/reference/privateca/2.12.0/privateca-override-authentication) - describes how to change the authentication credentials used by the library.\n- [Environment Variables](/cpp/docs/reference/privateca/2.12.0/privateca-env) - describes environment variables that can configure the behavior of the library."]]