Managing certificates for key pairs with ACME
Manage key pairs using the automatic certificate management environment (ACME) protocol, which automatically obtains and renews certificates indirectly signed by a well-known trust anchor.
About this task
The ACME protocol is an Internet Engineering Task Force (IETF) proposed standard protocol that automates the signing of TLS certificates by a certificate authority (CA).
The ACME certificate management option in PingAccess uses the staging Let’s Encrypt ACME CA by default.
The Let’s Encrypt staging server that PingAccess uses by default has more lenient rate limits, but it doesn’t generate functional certificates, to support its use for testing purposes. For more information about rate limits, see the Let’s Encrypt documentation. After testing your environment, you must switch to a production server using the PingAccess Administrative application programming interface (API).
To add more ACME servers, use a |
Steps
-
Click Security and then go to Key Pairs → Key Pairs.
-
Click the Pencil icon, and then click Manage with ACME for the key pair.
Result:
The ACME status changes to Pending. When the protocol has completed, the status changes to Valid if the protocol completed successfully.