---
title: Enable or Disable Total TLS
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[ACM](https://developers.cloudflare.com/api/resources/acm)
[Total TLS](https://developers.cloudflare.com/api/resources/acm/subresources/total_tls)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Enable or Disable Total TLS
POST/zones/{zone\_id}/acm/total\_tls
Set Total TLS Settings or disable the feature for a Zone.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`SSL and Certificates Write`
##### P ath ParametersExpand Collapse
zone\_id: string
Identifier.
maxLength32
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
enabled: boolean
If enabled, Total TLS will order a hostname specific TLS certificate for any proxied A, AAAA, or CNAME record in your zone.
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(params)%200%20%3E%20(param)%20enabled%20%3E%20(schema)>)
certificate\_authority: optional CertificateAuthority
The Certificate Authority that Total TLS certificates will be issued through.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(params)%200%20%3E%20(param)%20certificate_authority%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional object {certificate\_authority, enabled, validity\_period }
certificate\_authority: optional CertificateAuthority
The Certificate Authority that Total TLS certificates will be issued through.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
Link to this property
enabled: optional boolean
If enabled, Total TLS will order a hostname specific TLS certificate for any proxied A, AAAA, or CNAME record in your zone.
Link to this property
validity\_period: optional 90
The validity period in days for the certificates ordered via Total TLS.
Link to this property
[Link to this property](<#(resource)%20acm.total_tls%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Enable or Disable Total TLS
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/acm/total_tls \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"enabled": true,
"certificate_authority": "google"
}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"certificate_authority": "google",
"enabled": true,
"validity_period": 90
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"certificate_authority": "google",
"enabled": true,
"validity_period": 90
}
}
```