Stay organized with collections
Save and categorize content based on your preferences.
Update certificate authorities
This page explains how you can update the configuration for a certificate
authority (CA).
Update labels on a CA
Console
In the Google Cloud console, go to the Certificate authorities page.
Go to Certificate authorities
Under Certificate authorities, pick your target CA.
- In the Summary section, click Edit.
- Click Add labels.
- In the panel on the right side, click Add Item.
- Add the Key and Value for your label.
- Click Save.
gcloud
gcloud privateca roots update CA_NAME --location LOCATION --pool POOL_NAME --update-labels foo=bar
Where:
- CA_NAME: the unique identifier of the CA.
- LOCATION: the location of the certificate authority.
- POOL_NAME: the unique identifier of the CA pool.
--update-labels flag mentions the key-value pairs to update.
For more information about the gcloud privateca roots update command, see
gcloud privateca roots
update.
What's next
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-29 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis guide explains the process of updating the configuration for a certificate authority (CA).\u003c/p\u003e\n"],["\u003cp\u003eYou can update labels on a CA through the Google Cloud console by navigating to the Certificate authorities page, selecting your target CA, and editing the labels in the Summary section.\u003c/p\u003e\n"],["\u003cp\u003eThe gcloud command \u003ccode\u003egcloud privateca roots update\u003c/code\u003e can be used to update labels on a CA, specifying the CA name, location, pool name, and key-value pairs for the updated labels.\u003c/p\u003e\n"],["\u003cp\u003eThe required parameters for the \u003ccode\u003egcloud\u003c/code\u003e command include the CA's unique identifier (\u003ccode\u003eCA_NAME\u003c/code\u003e), its location (\u003ccode\u003eLOCATION\u003c/code\u003e), the CA pool's identifier (\u003ccode\u003ePOOL_NAME\u003c/code\u003e), and the \u003ccode\u003e--update-labels\u003c/code\u003e flag.\u003c/p\u003e\n"]]],[],null,["# Update certificate authorities\n==============================\n\nThis page explains how you can update the configuration for a certificate\nauthority (CA).\n\nUpdate labels on a CA\n---------------------\n\n### Console\n\n1. In the Google Cloud console, go to the **Certificate authorities** page.\n\n [Go to Certificate authorities](https://console.cloud.google.com/security/cas/certificateAuthorities)\n2. Under **Certificate authorities**, pick your target CA.\n\n 1. In the **Summary** section, click **Edit**.\n 2. Click **Add labels**.\n 3. In the panel on the right side, click **Add Item**.\n 4. Add the **Key** and **Value** for your label.\n 5. Click **Save**.\n\n### gcloud\n\n gcloud privateca roots update \u003cvar translate=\"no\"\u003eCA_NAME\u003c/var\u003e --location \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e --pool \u003cvar translate=\"no\"\u003ePOOL_NAME\u003c/var\u003e --update-labels foo=bar\n\nWhere:\n\n- \u003cvar translate=\"no\"\u003eCA_NAME\u003c/var\u003e: the unique identifier of the CA.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: the location of the certificate authority.\n- \u003cvar translate=\"no\"\u003ePOOL_NAME\u003c/var\u003e: the unique identifier of the CA pool.\n- `--update-labels` flag mentions the key-value pairs to update.\n\nFor more information about the `gcloud privateca roots update` command, see\n[gcloud privateca roots\nupdate](/sdk/gcloud/reference/privateca/roots/update).\n\nWhat's next\n-----------\n\n- Learn how to [manage the CA state](/certificate-authority-service/docs/managing-ca-state).\n- Learn how to [delete CAs](/certificate-authority-service/docs/deleting-certificate-authorities)."]]
