システム要件とネットワーク要件
デジサートのACME自動化エージェントをインストールする前に、システムとネットワークが最小要件を満たしていることを確認してください。
エージェントは、自動化されたTLS/SSＬサーバ証明書と同じシステムにインストールされる必要があります。
システム要件
ACMEエージェントソフトウェアは、以下の要件を満たすLinuxおよびWindowsシステムで動作します。
Server type | Supported OS versions | Minimum specifications |
|---|---|---|
Windows |
|
|
Linux |
|
|
ネットワーク要件
The DigiCert agent on each host must be able to resolve the fully qualified domain names (FQDNs) for the local web server, either via DNS or a local "hosts" file.
HTTPS（ポート443）にアウトバウンドで接続する。
Region
Platform URLs1
TCP port
Protocol
Americas (U.S.A.)
one.digicert.com,clientauth.one.digicert.com443
HTTPS
APJ (Japan)
one.digicert.co.jp,clientauth.one.digicert.co.jp443
HTTPS
EMEA (Netherlands)
one.nl.digicert.com,clientauth.one.nl.digicert.com443
HTTPS
EMEA (Switzerland)
one.ch.digicert.com,clientauth.one.ch.digicert.com443
HTTPS
1. For users with an on-premises DigiCert ONE deployment, the agent needs to access port 443 (HTTPS) on the local DigiCert ONE instance and ClientAuth host (for example, my-org.one.digicert.com and my-org.clientauth.digicert.com).
In addition, the agent requires outbound access to the below host for Trust Lifecycle Manager discovery and automation services:
Region
URL
TCP port
Protocol
All regions
automation-service.digicert.com1443
HTTPS
1. This service is delivered through a content distribution network (CDN) and the IP addresses may vary by region. If your organization uses IP-based allowlists, look up the automation-service.digicert.com host in your local region to determine which IP addresses to allow.
注記
If using a local DigiCert® sensor as proxy, the agent must also be able to connect outbound to the proxy listening port on the sensor. To learn more, see Use a sensor as a proxy server.
What's next
To install an agent on a single server, see: Install and activate a DigiCert agent.
To bulk install agents on multiple servers at once, see: Install DigiCert agents in silent mode.
If your organization has a private on-premises instance of DigiCert ONE, make sure you meet the additional requirements to use DigiCert agents for certificate lifecycle automation.