Skip to content

Delete internal user cert

DELETE/smime/users/internal

Email Management API · SMIME

Remove a specific certificate of an internal user, identified by email and certFingerprint. If the certificate is the user's last one, the user is implicitly removed from the S/MIME configuration listing.

Parameters

Name In Type Required Description
X-Tenant-ID header string (uuid) Yes Tenant ID.
email query string (email) Yes Delete with exact email address.
Must be 3–255 characters long.
certFingerprint query string Yes SHA-256 fingerprint of the certificate. This is not case sensitive.
Must match the pattern ^[a-fA-F0-9]{64}$. Must be exactly 64 characters long.

Request samples

curl -X DELETE "https://api-<data-region>.central.sophos.com/email/v1/smime/users/internal?email=<email>&certFingerprint=<certFingerprint>" -H "Authorization: Bearer <access-token>" -H "X-Tenant-ID: <tenant-id>"

import requests

response = requests.delete(
    "https://api-<data-region>.central.sophos.com/email/v1/smime/users/internal?email=<email>&certFingerprint=<certFingerprint>",
    headers={
        "Authorization": "Bearer <access-token>",
        "X-Tenant-ID": "<tenant-id>",
    },
)
print(response.json())

$headers = @{
    "Authorization" = "Bearer <access-token>"
    "X-Tenant-ID" = "<tenant-id>"
}
Invoke-RestMethod -Method DELETE -Uri "https://api-<data-region>.central.sophos.com/email/v1/smime/users/internal?email=<email>&certFingerprint=<certFingerprint>" -Headers $headers

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    req, err := http.NewRequest("DELETE", "https://api-<data-region>.central.sophos.com/email/v1/smime/users/internal?email=<email>&certFingerprint=<certFingerprint>", nil)
    if err != nil {
        panic(err)
    }
    req.Header.Set("Authorization", "Bearer <access-token>")
    req.Header.Set("X-Tenant-ID", "<tenant-id>")

    resp, err := http.DefaultClient.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

const response = await fetch("https://api-<data-region>.central.sophos.com/email/v1/smime/users/internal?email=<email>&certFingerprint=<certFingerprint>", {
  method: "DELETE",
  headers: {
    "Authorization": "Bearer <access-token>",
    "X-Tenant-ID": "<tenant-id>",
  },
});
const data = await response.json();
console.log(data);

Responses

200 — Certificate deleted successfully.

Response fields

deletedbooleanrequired
Indicates whether the certificate(s) were deleted.

Errors

Status Meaning
400 Invalid request.
401 Authentication required.
403 Authorization required.
404 Resource not found.
500 Internal server error.
503 Server Unavailable.

All error responses share the same shape — see the error response object.

Response examples

200

{
  "deleted": true
}

See the guide for a narrative walkthrough of this API.