Create an ACME profile
The ACME profile generates the ACME directory URL and credentials required to connect your ACME client to DigiCert® Private CA. It also binds incoming requests to a specific issuing CA, certificate template, authentication method, and lifecycle rules.
Important
Make sure you have an end entity certificate template in DigiCert Private CA that fits your certificate requirements before you start creating a profile.
To create an ACME profile in DigiCert Private CA:
In the main menu, select Profiles.
Select Create profile.
Select ACME under Protocols.
Enter a Profile name.
[Optional] Add a Description for your profile.
Select the Protocol version you prefer, from the available options.
In Issuer CA, select the certificate authority to be used for issuing the end entity certificates.
Select a Certificate template ID. You can only use one template in a profile. Create multiple profiles for different templates or certificate settings.
Select the Certificate validity details, like how many days, months, or years the issued certificates are valid for.
Enter a value in days for your preferred Renewal window. Your private CA rejects any renewal requests outside this window.
Select the Signature algorithm used by the profile.
Select Submit.
Caution
Prepare to copy and securely store the information shown next.
Copy the ACME directory URL, Key identifier, and HMAC key and store them securely.
Your ACME profile is saved.
Select Profiles in the main menu to see your ACME profile.
ACME URL and credentials
When you're ready to set up your ACME client, you'll need the following information:
ACME directory URL
Key identifier (KID)
HMAC key
ACME URLs are structured as follows:
https://<ca-server>/certificate-authority/api/v1/acme/directory
Where:
ca-serveris the base domain of your DigiCert Private CA./certificate-authority/api/v1/acme/is the standard path used by DigiCert Private CA for ACME protocol communication./directoryis the ACME directory endpoint used by ACME clients to discover supported operations.
The Key identifier is your profile ID while the HMAC key serves as a randomly generated authentication code. These values are part of External Account Binding (EAB) requirements in ACME.
Important
The HMAC key must be copied while creating the profile as it's permanently masked afterwards.