diff --git a/security/huks/include/native_huks_api.h b/security/huks/include/native_huks_api.h
index f052661e21981d10971e1a98d4f05457a67f1d3f..867a4756bb5636bad45c21fe80f23adec4fed7d0 100644
--- a/security/huks/include/native_huks_api.h
+++ b/security/huks/include/native_huks_api.h
@@ -180,6 +180,21 @@ struct OH_Huks_Result OH_Huks_IsKeyItemExist(const struct OH_Huks_Blob *keyAlias
 struct OH_Huks_Result OH_Huks_AttestKeyItem(const struct OH_Huks_Blob *keyAlias,
     const struct OH_Huks_ParamSet *paramSet, struct OH_Huks_CertChain *certChain);
 
+/**
+ * @brief Obtain the key certificate chain.
+ *
+ * @param keyAlias Indicates the pointer to the alias of the target key.
+ * @param paramSet Indicates the pointer to the parameters required for obtaining the key certificate.
+ * @param certChain Indicates the pointer to the key certificate chain obtained.
+ * @return Returns {@link OH_Huks_ErrCode#OH_HUKS_SUCCESS} if the operation is successful;
+ *    returns an error code otherwise.
+ * @since 11
+ * @version 1.0
+ * @note this is a networking duration interface caller need to get the certChain in asynchronous thread
+ */
+struct OH_Huks_Result OH_Huks_AnonAttestKeyItem(const struct OH_Huks_Blob *keyAlias,
+    const struct OH_Huks_ParamSet *paramSet, struct OH_Huks_CertChain *certChain);
+
 /**
  * @brief Initializes the key session interface and obtains a handle (mandatory) and challenge value (optional).
  *