diff --git a/docs/resources/group.md b/docs/resources/group.md
index 044506c..dcfc74c 100644
--- a/docs/resources/group.md
+++ b/docs/resources/group.md
@@ -219,7 +219,7 @@ Optional:
 - `tls_username` (String) TLS certificate attribute to use as username. For FTP clients it must match the name provided using the "USER" command. For WebDAV, if no username is provided, the CN will be used as username. For WebDAV clients it must match the implicit or provided username.
 - `two_factor_protocols` (List of String) Defines protocols that require two factor authentication. Valid values: SSH, FTP, HTTP
 - `user_type` (String) Hint for authentication plugins. Valid values: LDAPUser, OSUser
-- `web_client` (List of String) Web Client/user REST API restrictions. Valid values: write-disabled, password-change-disabled, password-reset-disabled, publickey-change-disabled, mfa-disabled, api-key-auth-change-disabled, info-change-disabled, shares-disabled, shares-without-password-disabled
+- `web_client` (List of String) Web Client/user REST API restrictions. Valid values: write-disabled, password-change-disabled, password-reset-disabled, publickey-change-disabled, tls-cert-change-disabled, mfa-disabled, api-key-auth-change-disabled, info-change-disabled, shares-disabled, shares-without-password-disabled
 
 <a id="nestedatt--user_settings--filters--access_time"></a>
 ### Nested Schema for `user_settings.filters.access_time`
diff --git a/docs/resources/user.md b/docs/resources/user.md
index 18e1321..6e2263b 100644
--- a/docs/resources/user.md
+++ b/docs/resources/user.md
@@ -229,7 +229,7 @@ Optional:
 - `tls_username` (String) TLS certificate attribute to use as username. For FTP clients it must match the name provided using the "USER" command. For WebDAV, if no username is provided, the CN will be used as username. For WebDAV clients it must match the implicit or provided username.
 - `two_factor_protocols` (List of String) Defines protocols that require two factor authentication. Valid values: SSH, FTP, HTTP
 - `user_type` (String) Hint for authentication plugins. Valid values: LDAPUser, OSUser
-- `web_client` (List of String) Web Client/user REST API restrictions. Valid values: write-disabled, password-change-disabled, password-reset-disabled, publickey-change-disabled, mfa-disabled, api-key-auth-change-disabled, info-change-disabled, shares-disabled, shares-without-password-disabled
+- `web_client` (List of String) Web Client/user REST API restrictions. Valid values: write-disabled, password-change-disabled, password-reset-disabled, publickey-change-disabled, tls-cert-change-disabled, mfa-disabled, api-key-auth-change-disabled, info-change-disabled, shares-disabled, shares-without-password-disabled
 
 <a id="nestedatt--filters--access_time"></a>
 ### Nested Schema for `filters.access_time`
diff --git a/go.mod b/go.mod
index 2ec6939..98f5c86 100644
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/hashicorp/terraform-plugin-go v0.22.2
 	github.com/hashicorp/terraform-plugin-log v0.9.0
 	github.com/hashicorp/terraform-plugin-testing v1.7.0
-	github.com/sftpgo/sdk v0.1.6-0.20240502175518-0e29cf9357a3
+	github.com/sftpgo/sdk v0.1.6-0.20240503162435-c5606dbe6084
 	github.com/stretchr/testify v1.9.0
 )
 
diff --git a/go.sum b/go.sum
index d1b00b6..391ae86 100644
--- a/go.sum
+++ b/go.sum
@@ -136,8 +136,8 @@ github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU
 github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
 github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
 github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
-github.com/sftpgo/sdk v0.1.6-0.20240502175518-0e29cf9357a3 h1:EsC1qh/9YS+vybUPOJNcHRwSNTGGUSqsFlDL1wkzO+Y=
-github.com/sftpgo/sdk v0.1.6-0.20240502175518-0e29cf9357a3/go.mod h1:ler/KG6kMLlsOs/8s6dVN3oom+z+NkbXBVWO//Cv/WA=
+github.com/sftpgo/sdk v0.1.6-0.20240503162435-c5606dbe6084 h1:oGSw0jSxIvjQ2TIsh7MEjAe98vSne6RSTrTChACcIyM=
+github.com/sftpgo/sdk v0.1.6-0.20240503162435-c5606dbe6084/go.mod h1:ler/KG6kMLlsOs/8s6dVN3oom+z+NkbXBVWO//Cv/WA=
 github.com/skeema/knownhosts v1.2.2 h1:Iug2P4fLmDw9f41PB6thxUkNUkJzB5i+1/exaj40L3A=
 github.com/skeema/knownhosts v1.2.2/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=