How-To: Register ACME Agent in EZCA

In this page we go through how to register EZCA ACME agent allowing your to issue ACME certificates in your private Certificate Authority.

For EZCA to validate the local domain ownership, we have to install a local agent in your network. This web service will receive all ACME request and validate the domain ownership on behalf of EZCA. In this step we will register the ACME Agent in EZCA to issue certificates for your CA.

Registering the Agent in EZCA

Navigate to the EZCA portal.
Navigate to Certificate Authorities.
Select the CA you want to add ACME to.
Scroll down to the ACME section of the details page
Select if Health checks will be done by EZCA or done by you.

Warning

Health Checks make sure that the authentication certificate is kept up to date. If you are not using EZCAs integrated health check, make sure you hit the endpoint “https://YOURACMEAgent/api/Health/Overall” every few minutes.
Enter the subject name for the authentication certificate that will be used to authenticate with EZCA (We will create the certificate in the next page).
Enter the agent friendly name (This is a name for your reference such as “ACME Agent East US”).
Enter the Agent URL.

Note

If EZCA will perform the health checks, the Agent URL has to be a valid public facing FQDN with a valid SSL certificate.
Click Register Agent
Your agent should show as registered.