Manually Triggering ACME Certificate Issuance
After completing the configuration of a TLS Context for ACME-based certificate management, trigger the device to request certificate issuance from the ACME-compliant CA. The process includes the following stages:
|
1.
|
The device automatically generates a Certificate Signing Request (CSR). |
|
2.
|
The device submits the CSR to the CA. |
|
3.
|
The CA issues the signed certificate. |
|
4.
|
The device automatically downloads and installs the certificate for the TLS Context. |
After the initial certificate issuance, the device automatically renews the certificate with the CA before it expires, according to the configured renewal schedule.
|
●
|
You can run only one certificate issuance action at a time on the device. |
|
●
|
The certificate issuance process can take several minutes to complete. |
|
●
|
The device polls the certificate issuance operation, and times out after several minutes if the CA doesn't respond. |
|
●
|
If the TLS Context already has a certificate, issuing a new certificate replaces the existing certificate. |
|
➢
|
To trigger ACME certificate issuance: |
|
2.
|
Select the TLS Context. |
|
3.
|
Click the Action button, and then from the drop-down menu, choose Issue ACME Certificate; a confirmation message appears. |
|
4.
|
Click Yes to confirm; a message appears displaying the progress of the ACME certificate issuance process. |