DirectoryService / Client / disable_ca_enrollment_policy

disable_ca_enrollment_policy¶

DirectoryService.Client.disable_ca_enrollment_policy(**kwargs)¶

Disables the certificate authority (CA) enrollment policy for the specified directory. This stops automatic certificate enrollment and management for domain-joined clients, but does not affect existing certificates.

Warning

Disabling the CA enrollment policy prevents new certificates from being automatically enrolled, but existing certificates remain valid and functional until they expire.

Request Syntax

response = client.disable_ca_enrollment_policy(
    DirectoryId='string'
)

Parameters:

DirectoryId (string) –

[REQUIRED]

The identifier of the directory for which to disable the CA enrollment policy.

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

(dict) –

Contains the results of the DisableCAEnrollmentPolicy operation.

Exceptions

DirectoryService.Client.exceptions.DirectoryDoesNotExistException
DirectoryService.Client.exceptions.DirectoryUnavailableException
DirectoryService.Client.exceptions.InvalidParameterException
DirectoryService.Client.exceptions.DisableAlreadyInProgressException
DirectoryService.Client.exceptions.EntityDoesNotExistException
DirectoryService.Client.exceptions.AccessDeniedException
DirectoryService.Client.exceptions.ClientException
DirectoryService.Client.exceptions.ServiceException