Get Origin CA keys

Origin CA keys are often used as the value of header X-AUTH-USER-SERVICE-KEY when interacting with Origin CA certificates API. It is also used by Keyless SSL key server.

Note

You can also interact with the Origin CA certificates API using an API token with Permissions that include Zone-SSL and Certificates-Edit.

The key value always starts with v1.0-.

Limitations

• Changing the Origin CA key is not recorded by Audit Logs.
• Each time you view the Origin CA key, it will be presented as a different value. All these different values are simultaneously valid until you click the Change button, which immediately invalidates all previously generated values.
• Origin CA keys have access to every account the user has access to.

View/Change your Origin CA keys

To retrieve your Origin CA keys:

1. Log in to the Cloudflare dashboard ↗.
2. Go to User Profile > API Tokens.
3. In the API Keys section, select Origin CA Key.