---
title: Keyless Certificates
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/terraform)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Keyless Certificates

#### resource cloudflare\_keyless\_certificate

##### required Expand Collapse

zone\_id: String

Identifier.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)

certificate: String

The zone’s SSL certificate or SSL certificate and intermediate(s).

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20certificate>)

host: String

The keyless SSL name.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20host>)

##### optional Expand Collapse

bundle\_method?: String

A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20bundle_method>)

Deprecatedenabled?: Bool

Whether or not the Keyless SSL is on or off.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>)

name?: String

The keyless SSL name.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)

<details>

<summary>

tunnel?: Attributes

Configuration for using Keyless SSL through a Cloudflare Tunnel.

</summary>

private\_ip: String

Private IP of the Key Server Host.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20private_ip">Link to this property</a>

vnet\_id: String

Cloudflare Tunnel Virtual Network ID.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20vnet_id">Link to this property</a>

</details>

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tunnel>)

port?: Float64

The keyless SSL port used to communicate between Cloudflare and the client’s Keyless SSL server.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20port>)

##### computed Expand Collapse

id: String

Keyless certificate identifier tag.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)

created\_on: Time

When the Keyless SSL was created.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_on>)

modified\_on: Time

When the Keyless SSL was last modified.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_on>)

status: String

Status of the Keyless SSL.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20status>)

permissions: List\[String]

Available permissions for the Keyless SSL for the current user requesting the item.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20permissions>)

### cloudflare\_keyless\_certificate

Terraform

HTTPTypeScriptPythonGoTerraform

```
resource "cloudflare_keyless_certificate" "example_keyless_certificate" {
  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
  certificate = <<EOT
  -----BEGIN CERTIFICATE-----
  MIIDtTCCAp2gAwIBAgIJAM15n7fdxhRtMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
  BAYTAlVTMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX
  aWRnaXRzIFB0eSBMdGQwHhcNMTQwMzExMTkyMTU5WhcNMTQwNDEwMTkyMTU5WjBF
  MQswCQYDVQQGEwJVUzETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50
  ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
  CgKCAQEAvq3sKsHpeduJHimOK+fvQdKsI8z8A05MZyyLp2/R/GE8FjNv+hkVY1WQ
  LIyTNNQH7CJecE1nbTfo8Y56S7x/rhxC6/DJ8MIulapFPnorq46KU6yRxiM0MQ3N
  nTJHlHA2ozZta6YBBfVfhHWl1F0IfNbXCLKvGwWWMbCx43OfW6KTkbRnE6gFWKuO
  fSO5h2u5TaWVuSIzBvYs7Vza6m+gtYAvKAJV2nSZ+eSEFPDo29corOy8+huEOUL8
  5FAw4BFPsr1TlrlGPFitduQUHGrSL7skk1ESGza0to3bOtrodKei2s9bk5MXm7lZ
  qI+WZJX4Zu9+mzZhc9pCVi8r/qlXuQIDAQABo4GnMIGkMB0GA1UdDgQWBBRvavf+
  sWM4IwKiH9X9w1vl6nUVRDB1BgNVHSMEbjBsgBRvavf+sWM4IwKiH9X9w1vl6nUV
  RKFJpEcwRTELMAkGA1UEBhMCVVMxEzARBgNVBAgTClNvbWUtU3RhdGUxITAfBgNV
  BAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJAM15n7fdxhRtMAwGA1UdEwQF
  MAMBAf8wDQYJKoZIhvcNAQEFBQADggEBABY2ZzBaW0dMsAAT7tPJzrVWVzQx6KU4
  UEBLudIlWPlkAwTnINCWR/8eNjCCmGA4heUdHmazdpPa8RzwOmc0NT1NQqzSyktt
  vTqb4iHD7+8f9MqJ9/FssCfTtqr/Qst/hGH4Wmdf1EJ/6FqYAAb5iRlPgshFZxU8
  uXtA8hWn6fK6eISD9HBdcAFToUvKNZ1BIDPvh9f95Ine8ar6yGd56TUNrHR8eHBs
  ESxz5ddVR/oWRysNJ+aGAyYqHS8S/ttmC7r4XCAHqXptkHPCGRqkAhsterYhd4I8
  /cBzejUobNCjjHFbtkAL/SjxZOLW+pNkZwfeYdM8iPkD54Uua1v2tdw=
  -----END CERTIFICATE-----
  EOT
  host = "example.com"
  port = 24008
  bundle_method = "ubiquitous"
  name = "example.com Keyless SSL"
  tunnel = {
    private_ip = "10.0.0.1"
    vnet_id = "7365377a-85a4-4390-9480-531ef7dc7a3c"
  }
}
```

#### data cloudflare\_keyless\_certificate

##### required Expand Collapse

keyless\_certificate\_id: String

Keyless certificate identifier tag.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20keyless_certificate_id>)

zone\_id: String

Identifier.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)

##### computed Expand Collapse

id: String

Keyless certificate identifier tag.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)

created\_on: Time

When the Keyless SSL was created.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_on>)

enabled: Bool

Whether or not the Keyless SSL is on or off.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>)

host: String

The keyless SSL name.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20host>)

modified\_on: Time

When the Keyless SSL was last modified.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_on>)

name: String

The keyless SSL name.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)

port: Float64

The keyless SSL port used to communicate between Cloudflare and the client’s Keyless SSL server.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20port>)

status: String

Status of the Keyless SSL.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20status>)

permissions: List\[String]

Available permissions for the Keyless SSL for the current user requesting the item.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20permissions>)

<details>

<summary>

tunnel: Attributes

Configuration for using Keyless SSL through a Cloudflare Tunnel.

</summary>

private\_ip: String

Private IP of the Key Server Host.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20private_ip">Link to this property</a>

vnet\_id: String

Cloudflare Tunnel Virtual Network ID.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20vnet_id">Link to this property</a>

</details>

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tunnel>)

### cloudflare\_keyless\_certificate

Terraform

HTTPTypeScriptPythonGoTerraform

```
data "cloudflare_keyless_certificate" "example_keyless_certificate" {
  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
  keyless_certificate_id = "4d2844d2ce78891c34d0b6c0535a291e"
}
```

#### data cloudflare\_keyless\_certificates

##### required Expand Collapse

zone\_id: String

Identifier.

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_id>)

##### optional Expand Collapse

max\_items?: Int64

Max items to fetch, default: 1000

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)

##### computed Expand Collapse

<details>

<summary>

result: List\[Attributes]

The items returned by the data source

</summary>

id: String

Keyless certificate identifier tag.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20id">Link to this property</a>

created\_on: Time

When the Keyless SSL was created.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20created_on">Link to this property</a>

enabled: Bool

Whether or not the Keyless SSL is on or off.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20enabled">Link to this property</a>

host: String

The keyless SSL name.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20host">Link to this property</a>

modified\_on: Time

When the Keyless SSL was last modified.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20modified_on">Link to this property</a>

name: String

The keyless SSL name.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20name">Link to this property</a>

permissions: List\[String]

Available permissions for the Keyless SSL for the current user requesting the item.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20permissions">Link to this property</a>

port: Float64

The keyless SSL port used to communicate between Cloudflare and the client’s Keyless SSL server.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20port">Link to this property</a>

status: String

Status of the Keyless SSL.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20status">Link to this property</a>

<details>

<summary>

tunnel: Attributes

Configuration for using Keyless SSL through a Cloudflare Tunnel.

</summary>

private\_ip: String

Private IP of the Key Server Host.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20private_ip">Link to this property</a>

vnet\_id: String

Cloudflare Tunnel Virtual Network ID.

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20tunnel%20%3E%20(attribute)%20vnet_id">Link to this property</a>

</details>

<a href="#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result%20%3E%20(attribute)%20tunnel">Link to this property</a>

</details>

[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)

### cloudflare\_keyless\_certificates

Terraform

HTTPTypeScriptPythonGoTerraform

```
data "cloudflare_keyless_certificates" "example_keyless_certificates" {
  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```