Skip to main content

Install third-party ACME client software

You can use any third-party ACME client compliant with ACME protocol version 2 (ACMEv2) to get certificates from CertCentral. Examples are Certbot and win-acme.

Install your preferred ACME client on each server where you want to automate certificates. You will use the ACME client to request certificates from CertCentral via the ACME credentials you set up there.

Prerequisites

The ACME client on each server must be able to:

  • Connect outbound to HTTPS (port 443) on the external DigiCert host one.digicert.com (USA) or one.nl.digicert.com (Europe).

  • Resolve fully qualified domain names (FQDNs) for the local system, either via DNS or a local "hosts" file.

Install and configure the ACME clients

Follow the software provider's guidelines to install and configure your preferred third-party ACME client on each system that will request certificates from CertCentral.

For example, Certbot provides instructions per operating system and web server application.

What's next

With ACME credentials set up in CertCentral and a third-party ACME client installed on each server, you are ready to use ACME to request and manage certificates from CertCentral.

In this section: