Skip to main content

Automate your TLS/SSL certificate lifecycle

CertCentral guided automation setup helps you configure your certificate and generate the credentials for setting up your automated certificate request, installation, and zero-touch renewal.

Generate your automation command in CertCentral

Configure your certificate and download the automation command or ACME credentials to run on your web server.

  1. Buy a new certificate or redeem a certificate in your subscription.

    • Buy: On your DigiCert CertCentral dashboard, select Shop DigiCert.

    • Redeem: On your DigiCert CertCentral dashboard, select My Digital trust products > My subscription.

      Find the certificate type with available domains that you want to request a certificate for.

  2. From the Actions menu for the certificate type, select Request certificate.

  3. On the automation introduction page, Select Automate now!.

    Tip

    For an overview of CertCentral guided automation, go to How does it work?.

  4. On the Set up page, enter your certificate details:

    • Domains

    • Organization

    • Contacts

    • Validity period

    Select Next.

  5. For Automation options, select the automation client you want to use.

    • CertCentral automation agent (recommended): The DigiCert ACME client with native CertCentral integration and optimized performance.

    • Certbot: Supported ACME client. Requires download and installation from third-party vendor.

    Note

    For other ACME clients, see our 憑證生命周期自動化指南.

  6. Select your Server operating system.

    The automation command or credentials configuration panel opens.

  7. Select your Web server type.

  8. Confirm or change your Domain validation method.

    Available options are based on the certificate type (such as wildcard).

  9. Download the automation command or ACME credentials for this certificate request.

    Important

    Don't forget your credentials!

    These unique credentials can't be regenerated or shown again after you leave this page.

Install and verify your certificate on your web server

Run the downloaded automation command (or ACME credentials) on your web server to request and install your certificate.

  • If you selected the CertCentral automation agent or other supported ACME client, the generated command includes all information needed to request, receive, and install the certificate.

  • If you selected Other for your server details, use the generated ACME credentials to create the certificate request for your client.

  1. On your web server, open your terminal or shell.

  2. Copy and paste your automation command in your terminal.

    1. The CertCentral agent or ACME client generates and submits the certificate request (including the CSR) to DigiCert.

    2. DigiCert processes the request and issues the certificate to the agent or client. Time to issuance varies based on validation requirements.

      Tip

      Check your email!

      DigiCert will message you if additional organizational or domain validation information is needed.

    3. The client or agent installs the certificate on your web server.

  3. Validate successful installation and configuration for HTTPS after the certificate is issued and installed:

    • Through your web server's admin interface.

    • On your website. Check site information in the address bar for the lock icon or other indication of a secure connection.

    • With the DigiCert SSL Certificate Checker.

: