Security

Configure an automated certificate

ACME (Automatic Certificate Management Environment) servers automate the process of obtaining, managing, and renewing digital certificates. They use the ACME protocol, which is also used by Let's Encrypt, a popular Certificate Authority (CA).

ACME servers validate domain ownership by verifying that the entity requesting a certificate controls the domain, typically through DNS or HTTP challenges. Once validation is successful, the ACME server issues a certificate, commonly used for TLS/SSL to enable HTTPS on websites. Additionally, ACME servers support the automated renewal of certificates, helping to reduce the risk of certificate expiration and downtime.

TYour appliance integrates with several ACME servers to provide an automated, free, and secure way to obtain and manage TLS certificates. This functionality simplifies certificate management, ensuring secure communications while minimizing administrative effort.

1. In the Security :: Automated Certificates section, click Register new ACME server.
   The Automated Certificates :: Register New ACME Server section loads.
2. From the Server type dropdown, select the type of ACME server you want to use, such as Let's Encrypt or a custom ACME server.
   Additional fields load based on the server type selected.
3. For Let's Encrypt and Buypass, fill out these fields.
   • Directory URL: Specify the URL of the ACME server's directory endpoint for certificate management.
   • Website: The website associated with the selected ACME server.
   • Terms of Service: A link to the ACME server's terms of service.
   • Email Address: Enter the email address to associate with your ACME account for notifications.
4. For all other server types, fill out these fields.
   • Directory URL: Specify the URL of the ACME server's directory endpoint for certificate management.
   • Website: The website associated with the selected ACME server.
   • Terms of Service: A link to the ACME server's terms of service.
   • EAB Key ID: Enter the Key ID for External Account Binding (EAB) to link your ACME account with the server.
   • EAB HMAC Key: Provide the HMAC Key for External Account Binding (EAB) to authenticate the ACME account.
   • Email Address: Enter the email address to associate with your ACME account for notifications.
5. Click Submit to apply your changes.