import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * ScepProfile resource
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as scm from "@pulumi/scm";
 *
 * // scep profile w/ no challenge
 * const scmScepProfile1 = new scm.ScepProfile("scm_scep_profile_1", {
 *     folder: "ngfw-shared",
 *     name: "scep-prof-1",
 *     scepUrl: "https://scep.example.com/",
 *     caIdentityName: "Default",
 *     digest: "sha1",
 *     subject: "CN=$USERNAME",
 *     scepChallenge: {
 *         fixed: "123",
 *     },
 *     algorithm: {
 *         rsa: {
 *             rsaNbits: "1024",
 *         },
 *     },
 * });
 * // scep profile w/ fixed challenge
 * const scmScepProfile2 = new scm.ScepProfile("scm_scep_profile_2", {
 *     folder: "ngfw-shared",
 *     name: "scep-prof-2",
 *     scepUrl: "https://example.target.com/",
 *     caIdentityName: "user-scep",
 *     digest: "sha256",
 *     subject: "CN=$USERNAME",
 *     scepCaCert: "Forward-Trust-CA-ECDSA",
 *     scepChallenge: {
 *         fixed: "Password123!",
 *     },
 *     certificateAttributes: {
 *         rfc822name: "user@example.com",
 *     },
 *     algorithm: {
 *         rsa: {
 *             rsaNbits: "2048",
 *         },
 *     },
 * });
 * // scep profile w/ dynamic challenge
 * const scmScepProfile3 = new scm.ScepProfile("scm_scep_profile_3", {
 *     folder: "ngfw-shared",
 *     name: "scep-prof-3",
 *     scepUrl: "https://example.gateway.com/",
 *     caIdentityName: "vpn-gateway",
 *     digest: "sha384",
 *     subject: "CN=$CORP_VPN",
 *     scepCaCert: "GlobalSign-Root-CA",
 *     fingerprint: "64EC88CA00B268E5BA1A35678A1B5316D212F4F366B24772322342423123455A",
 *     useAsDigitalSignature: false,
 *     scepChallenge: {
 *         dynamic: {
 *             username: "user123",
 *             password: "Password123!",
 *             otpServerUrl: "http://auth.com",
 *         },
 *     },
 *     certificateAttributes: {
 *         dnsname: "vpn-gateway.example.com",
 *     },
 *     algorithm: {
 *         rsa: {
 *             rsaNbits: "3072",
 *         },
 *     },
 * });
 * // scep profile w/ all fields
 * const scmScepProfile4 = new scm.ScepProfile("scm_scep_profile_4", {
 *     folder: "ngfw-shared",
 *     name: "scep-prof-4",
 *     scepUrl: "https://example.wifi.com/",
 *     caIdentityName: "wifi",
 *     digest: "sha512",
 *     subject: "CN=$WIFI-ACCESS",
 *     scepCaCert: "Root CA",
 *     scepClientCert: "Forward-UnTrust-CA-ECDSA",
 *     fingerprint: "4448CA00B268E5BU690378A1B5316D212F4F366B2477232234394I",
 *     useAsDigitalSignature: true,
 *     useForKeyEncipherment: true,
 *     scepChallenge: {
 *         dynamic: {
 *             username: "admin",
 *             password: "Pwd@123",
 *             otpServerUrl: "http://auth.com",
 *         },
 *     },
 *     certificateAttributes: {
 *         uniformResourceIdentifier: "file:///C:/Users/Documents/report.txt",
 *     },
 *     algorithm: {
 *         rsa: {
 *             rsaNbits: "3072",
 *         },
 *     },
 * });
 * ```
 *
 * ## Import
 *
 * The following command can be used to import a resource not managed by Terraform:
 *
 * ```sh
 * $ pulumi import scm:index/scepProfile:ScepProfile example folder:::id
 * ```
 *
 * or
 *
 * ```sh
 * $ pulumi import scm:index/scepProfile:ScepProfile example :snippet::id
 * ```
 *
 * or
 *
 * ```sh
 * $ pulumi import scm:index/scepProfile:ScepProfile example ::device:id
 * ```
 *
 * **Note:** Please provide just one of folder, snippet, or device for the import command.
 */
export declare class ScepProfile extends pulumi.CustomResource {
    /**
     * Get an existing ScepProfile resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ScepProfileState, opts?: pulumi.CustomResourceOptions): ScepProfile;
    /**
     * Returns true if the given object is an instance of ScepProfile.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is ScepProfile;
    /**
     * Algorithm
     */
    readonly algorithm: pulumi.Output<outputs.ScepProfileAlgorithm>;
    /**
     * Certificate Authority Identity
     */
    readonly caIdentityName: pulumi.Output<string>;
    /**
     * Subject Alternative name type
     */
    readonly certificateAttributes: pulumi.Output<outputs.ScepProfileCertificateAttributes | undefined>;
    /**
     * The device in which the resource is defined
     */
    readonly device: pulumi.Output<string | undefined>;
    /**
     * Digest for CSR
     */
    readonly digest: pulumi.Output<string>;
    /**
     * Map of sensitive values returned from the API.
     */
    readonly encryptedValues: pulumi.Output<{
        [key: string]: string;
    }>;
    /**
     * CA Certificate Fingerprint
     */
    readonly fingerprint: pulumi.Output<string | undefined>;
    /**
     * The folder in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    readonly folder: pulumi.Output<string | undefined>;
    /**
     * The name of the SCEP profile
     */
    readonly name: pulumi.Output<string>;
    /**
     * SCEP Server CA Certificate
     */
    readonly scepCaCert: pulumi.Output<string | undefined>;
    /**
     * One Time Password Challenge
     */
    readonly scepChallenge: pulumi.Output<outputs.ScepProfileScepChallenge>;
    /**
     * SCEP Client Certificate
     */
    readonly scepClientCert: pulumi.Output<string | undefined>;
    /**
     * SCEP server URL
     */
    readonly scepUrl: pulumi.Output<string>;
    /**
     * The snippet in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    readonly snippet: pulumi.Output<string | undefined>;
    /**
     * Subject
     */
    readonly subject: pulumi.Output<string>;
    /**
     * The Terraform ID.
     */
    readonly tfid: pulumi.Output<string>;
    /**
     * Use as digital signature?
     */
    readonly useAsDigitalSignature: pulumi.Output<boolean | undefined>;
    /**
     * Use for key encipherment?
     */
    readonly useForKeyEncipherment: pulumi.Output<boolean | undefined>;
    /**
     * Create a ScepProfile resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: ScepProfileArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering ScepProfile resources.
 */
export interface ScepProfileState {
    /**
     * Algorithm
     */
    algorithm?: pulumi.Input<inputs.ScepProfileAlgorithm | undefined>;
    /**
     * Certificate Authority Identity
     */
    caIdentityName?: pulumi.Input<string | undefined>;
    /**
     * Subject Alternative name type
     */
    certificateAttributes?: pulumi.Input<inputs.ScepProfileCertificateAttributes | undefined>;
    /**
     * The device in which the resource is defined
     */
    device?: pulumi.Input<string | undefined>;
    /**
     * Digest for CSR
     */
    digest?: pulumi.Input<string | undefined>;
    /**
     * Map of sensitive values returned from the API.
     */
    encryptedValues?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    } | undefined>;
    /**
     * CA Certificate Fingerprint
     */
    fingerprint?: pulumi.Input<string | undefined>;
    /**
     * The folder in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    folder?: pulumi.Input<string | undefined>;
    /**
     * The name of the SCEP profile
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * SCEP Server CA Certificate
     */
    scepCaCert?: pulumi.Input<string | undefined>;
    /**
     * One Time Password Challenge
     */
    scepChallenge?: pulumi.Input<inputs.ScepProfileScepChallenge | undefined>;
    /**
     * SCEP Client Certificate
     */
    scepClientCert?: pulumi.Input<string | undefined>;
    /**
     * SCEP server URL
     */
    scepUrl?: pulumi.Input<string | undefined>;
    /**
     * The snippet in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    snippet?: pulumi.Input<string | undefined>;
    /**
     * Subject
     */
    subject?: pulumi.Input<string | undefined>;
    /**
     * The Terraform ID.
     */
    tfid?: pulumi.Input<string | undefined>;
    /**
     * Use as digital signature?
     */
    useAsDigitalSignature?: pulumi.Input<boolean | undefined>;
    /**
     * Use for key encipherment?
     */
    useForKeyEncipherment?: pulumi.Input<boolean | undefined>;
}
/**
 * The set of arguments for constructing a ScepProfile resource.
 */
export interface ScepProfileArgs {
    /**
     * Algorithm
     */
    algorithm: pulumi.Input<inputs.ScepProfileAlgorithm>;
    /**
     * Certificate Authority Identity
     */
    caIdentityName: pulumi.Input<string>;
    /**
     * Subject Alternative name type
     */
    certificateAttributes?: pulumi.Input<inputs.ScepProfileCertificateAttributes | undefined>;
    /**
     * The device in which the resource is defined
     */
    device?: pulumi.Input<string | undefined>;
    /**
     * Digest for CSR
     */
    digest: pulumi.Input<string>;
    /**
     * CA Certificate Fingerprint
     */
    fingerprint?: pulumi.Input<string | undefined>;
    /**
     * The folder in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    folder?: pulumi.Input<string | undefined>;
    /**
     * The name of the SCEP profile
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * SCEP Server CA Certificate
     */
    scepCaCert?: pulumi.Input<string | undefined>;
    /**
     * One Time Password Challenge
     */
    scepChallenge: pulumi.Input<inputs.ScepProfileScepChallenge>;
    /**
     * SCEP Client Certificate
     */
    scepClientCert?: pulumi.Input<string | undefined>;
    /**
     * SCEP server URL
     */
    scepUrl: pulumi.Input<string>;
    /**
     * The snippet in which the resource is defined
     *
     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
     */
    snippet?: pulumi.Input<string | undefined>;
    /**
     * Subject
     */
    subject: pulumi.Input<string>;
    /**
     * Use as digital signature?
     */
    useAsDigitalSignature?: pulumi.Input<boolean | undefined>;
    /**
     * Use for key encipherment?
     */
    useForKeyEncipherment?: pulumi.Input<boolean | undefined>;
}
//# sourceMappingURL=scepProfile.d.ts.map