Uploading DNS-01 Credentials to an ACME Profile

You need to upload DNS-01 credentials to the ACME Profile if you selected DNS-01 as the challenge type (see 'Challenge Type' parameter in the ACME Profiles table). This is the validation method the device uses to prove domain ownership to the ACME-compliant CA.

With DNS-01, the device proves domain ownership by publishing a specific TXT record in the domain's DNS zone, which the CA queries. To create this TXT record automatically, the device needs credentials for your DNS provider account. You provide these credentials by uploading a JSON file to the ACME Profile.

The DNS-01 credentials file:

Must be defined in flat key/value JSON object, containing the following:
The acme.sh DNS plugin name.
The provider-specific variables required by the plugin.
Maximum file size: 8,192 bytes.
The reserved key ACME_DNS_PLUGIN selects the acme.sh DNS plugin to use.

The required keys and values differ per DNS provider. The following table lists the supported DNS providers and links to the JSON structure each one requires:

DNS Provider

JSON Structure

Microsoft Azure DNS

See DNS-01 JSON File Structure for Azure DNS.

To upload a file with DNS-01 credentials to an ACME Profile:
1. Create a .json file for the DNS-01 credentials:
a. Use the JSON structure for your DNS provider. See the previous table for supported DNS providers and links to the required JSON structure.
b. Replace each placeholder value with the corresponding value from your DNS provider account.
1. Open the ACME Profiles table (see Configuring ACME Profiles).
2. Select the ACME Profile.
3. Click the Action button, and then from the drop-down menu, choose Upload DNS-01 File; a confirmation message box appears.
4. Click Yes to confirm.
5. Browse to the folder on your computer where the .json file that you created is located, and then select it.
6. Verify the 'DNS-01 Credentials Loaded' column in the ACME Profiles table displays "yes".