---
title: Enabling the Delegated Admin user REST resource type certificate upload feature
description: In Delegated Admin 4.10.0 and later, you can add a certificate to a user REST resource type profile in the Delegated Admin application.
component: pingdirectory
version: 11.0
page_id: pingdirectory:delegated_admin_application_guide:pd_da_enable_user_cert_upload
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/delegated_admin_application_guide/pd_da_enable_user_cert_upload.html
revdate: September 13, 2023
page_aliases: ["pd_da_enable_user_profile_cert_admin_console.adoc", "pd_da_enable_user_cert_upload_dsconfig.adoc"]
section_ids:
  enabling-the-user-profile-certificate-upload-feature-using-the-admin-console: Enabling the user profile certificate upload feature using the admin console
  about-this-task: About this task
  steps: Steps
  enabling-the-user-profile-certificate-upload-feature-using-dsconfig: Enabling the user profile certificate upload feature using dsconfig
  about-this-task-2: About this task
  steps-2: Steps
  example: Example:
  example-2: Example:
---

# Enabling the Delegated Admin user REST resource type certificate upload feature

In Delegated Admin 4.10.0 and later, you can add a certificate to a user REST resource type profile in the Delegated Admin application.

To use the Delegated Admin certificate upload feature, you must first enable the feature. You can use the PingDirectory admin console or `dsconfig` to perform this task.

After you've enabled the feature, it's ready to use when creating a new user or when editing an existing user. To use the enabled certificate upload feature, see [Uploading a certificate to a user REST resource type profile in Delegated Admin](pd_da_upload_user_cert.html).

## Enabling the user profile certificate upload feature using the admin console

In Delegated Admin 4.10.0 and later, the user profile certificate upload feature can be enabled using the PingDirectory admin console.

### About this task

To enable the Delegated Admin user REST resource type certificate upload feature using the PingDirectory admin console:

### Steps

1. In the **Web Services and Applications** list, select **REST Resource Types**.

2. In the **REST Resource Types** list, select your user REST resource type.

3. Go to **Delegated Admin Attributes** and click **New Delegated Admin Attribute**.

4. In the **New Delegated Admin Attribute** list, select **Certificate Delegated Admin Attribute**.

   ![Screen capture showing the Delegated Admin New Attribute list with the Certificate Delegated Admin Attribute highlighted.](_images/delegated-admin-cert-attribute.png)

5. In the **Attribute Type** field, enter the attribute type, such as `userCertificate`.

6. Enter a **Display Name** for the attribute.

7. Keep the default values for **Mutability**.

8. (Optional) To allow multiple files to be uploaded for one user, enable **Multi Valued**.

9. Enter a **Display Order Index** or keep the default, `0`.

10. In the **Allowed MIME Type** list, select your desired allowed MIME file types.

    ![Screen capture showing the Delegated Admin new certificate attribute Allowed Mime Type options.](_images/delegated-admin-cert-attr-mime.png)

11. Click **Save**.

## Enabling the user profile certificate upload feature using `dsconfig`

In Delegated Admin 4.10.0 and later, the user profile certificate upload feature can also be enabled using `dsconfig`.

### About this task

|   |                                                                                                              |
| - | ------------------------------------------------------------------------------------------------------------ |
|   | To allow multiple files to be uploaded for one user, set `multi-valued` to `true`, as in the second example. |

To enable the Delegated Admin user REST resource type profile certificate upload feature using `dsconfig`:

### Steps

* Run `dsconfig create-delegated-admin-attribute`.

  #### Example:

  The following example creates a `userCertificate` attribute with `.cer` and `.crt` set as accepted file types:

  ```
  bin/dsconfig create-delegated-admin-attribute \
      --type-name users  \
      --attribute-type userCertificate  \
      --type certificate  \
      --set "display-name:user certificate"  \
      --set display-order-index:3  \
      --set allowed-mime-type:cer  \
      --set allowed-mime-type:crt -n
  ```

  ### Example:

  The following example creates a multivalued `userCertificate` attribute with `.cer` and `.crt` set as accepted file types:

  ```
  bin/dsconfig create-delegated-admin-attribute \
      --type-name users  \
      --attribute-type userCertificate  \
      --type certificate  \
      --set "display-name:user certificate"  \
      --set multi-valued:true  \
      --set display-order-index:3  \
      --set allowed-mime-type:cer  \
      --set allowed-mime-type:crt -n
  ```