acme-profile

This command configures the ACME Profiles table, which lets you define a registered account with an ACME-compliant Certificate Authority (CA).

Syntax

(config-network)# acme-profile <Index> 
(acme-profile-<Index>)#  

Command

Description

Index

Defines the table row index.

challenge-type {DNS-01|HTTP-01}

Defines the validation method the device uses to prove domain ownership to the ACME-compliant CA.

email-address

Defines the email address used to register the device's account with the ACME-compliant CA.

name

Defines a name for the ACME Profile.

server-eab-hmac-key

Defines the External Account Binding (EAB) HMAC key, used to bind the device's ACME account to an existing account at the CA.

server-eab-kid

Defines the External Account Binding (EAB) key identifier (KID), used together with the Server EAB HMAC key to bind the device's ACME account to an existing account at the CA..

server-interface

Assigns an IP Interface from the IP Interfaces table through which the device communicates with the ACME-compliant CA server.

server-url

Defines the URL of the ACME server.

Command Mode

Privileged User

Example

This example configures an ACME profile:

(config-network)#  acme-profile 1
( acme-profile-1)# name Zero
( acme-profile-1)# email-address joed@example.com
( acme-profile-1)# server-url https://example.zerossl.com/v2/sbc90
( acme-profile-1)# challenge-type HTTP-01
( acme-profile-1)# activate