Technical Guides
Installing, renewing and automating SSL certificates with ACME. Search, filter by operating system and type, and open the guide for your platform.
Operating system
Type
Showing 76 of 76 guides
- ACME validation: HTTP-01, DNS-01, TLS-ALPN-01 When to use which method, DNS CNAME delegation, FairSSL AutoDNS and troubleshooting.
- ADFS and WAP SSL Administration SSL certificates for ADFS and Web Application Proxy (WAP) with PowerShell.
- Apache SSL/TLS Administration Configure and manage SSL/TLS certificates in Apache HTTP Server on Linux.
- Appliances: built-in ACME or proxy Native ACME vs proxy approach. Entry point to all appliance guides.
- AWS KMS / CloudHSM: Code Signing Setup Set up AWS KMS or CloudHSM for Code Signing.
- Azure Key Vault: Code Signing Setup Complete guide to setting up Azure Key Vault Premium for Code Signing.
- BIMI and VMC/CMC DMARC requirements, SVG Tiny PS logo, the BIMI DNS record and email client support.
- CAA record setup Control which Certificate Authorities may issue certificates for your domain with DNS CAA records.
- Cisco ASA & appliances without EAB Single-use enrollment URL for devices that take an ACME URL but have no EAB Key ID / HMAC fields.
- Cisco ASA SSL Administration Installing and configuring an SSL certificate on a Cisco ASA firewall with ASDM.
- Citrix NetScaler / ADC simple-acme + NITRO API. SSL cert-key bundle on 14.1+ or classic cert-key on older.
- Create a CSR for Code Signing in Azure Key Vault Premium A CSR with a 4096 bit RSA-HSM key in Azure, for DigiCert or GlobalSign.
- Cross-signed intermediate on Windows Server Add, force, remove and distribute cross-signed intermediates on Windows Server.
- CSR Generation (All Platforms) Create a CSR to order SSL certificates, with examples for Windows, Linux and macOS.
- DigiCert Code Signing on a USB token DigiCert Code Signing on a SafeNet USB token with the installation code from FairSSL.
- DigiCert G5 cross-sign on Windows Server The DigiCert G5 intermediate and cross-sign towards Global Root G2 on Windows Server.
- DNS validation of SSL certificates How to validate domain ownership with a DNS TXT or CNAME record for DV certificates.
- Dynamics CRM / Dynamics 365 CE (IFD) simple-acme and ImportDynamicsCRM.v1.ps1 update IIS, the claims certificate and CRM relying party trusts.
- Dynamics NAV / Business Central IIS + Service Tier updated together. Only changed instances are restarted.
- Exchange 2007: SSL Certificate Installation and Configuration Exchange 2007: DNS planning, CSR, installation and service activation.
- Exchange 2010: SSL Certificate Installation Exchange 2010: DNS planning, service URLs, CSR, installation and activation.
- Exchange 2013: SSL Certificate Installation Guide Exchange 2013: DNS planning, CSR, installation and service assignment.
- Exchange 2016/2019: SSL Certificate Installation Guide DNS planning, service URLs, CSR, installation and service assignment.
- Exchange Server (ACME) simple-acme + ImportExchange.v3.ps1. OWA, EWS, SMTP, IMAP and POP in one go.
- Exchange Server: Automating SSL/TLS Certificates with simple-acme How to automate SSL/TLS certificate renewal on Exchange Server using the simple-acme ACME client.
- Exchange: PFX Certificate Import Import the certificate from PFX into Exchange with PowerShell or EAC.
- Exchange: PFX export Export the certificate from Exchange to PFX with PowerShell or EAC.
- F5 BIG-IP Built-in ACME from BIG-IP 21.1.0. Use Lego and iControl REST on older versions.
- FortiGate (7.6.3+ and legacy) Native ACME on FortiOS 7.6.3+ or proxy for older versions and FortiMail/FortiWeb.
- GlobalSign and AlphaSSL cross-sign on Windows Server The GlobalSign GCC R46 intermediate and cross-sign on Windows Server.
- GlobalSign Code Signing with USB token GlobalSign Code Signing on a SafeNet USB token: drivers, initialisation and signing.
- Google Cloud KMS: Code Signing Setup Set up Google Cloud KMS for Code Signing.
- HAProxy SSL Administration Installing and configuring an SSL certificate in the HAProxy load balancer.
- hMailServer SSL Administration Installing an SSL certificate in the hMailServer mail server on Windows.
- IIS - Hosting Multiple HTTPS Websites on a Single IP Address Several SSL websites on one IP address with SNI in IIS.
- IIS 7: Exporting to PFX Export an SSL certificate from IIS 7.0 or 7.5 to a PFX backup file using MMC.
- IIS 7: PFX Certificate Import Learn how to import an SSL certificate from a PFX file to IIS 7.0 and 7.5 via the MMC console.
- IIS 7: SSL Certificate Installation Install the certificate in IIS 7.0 and 7.5 and configure the HTTPS binding.
- IIS 8-10: PFX Export Export the certificate from IIS 8 to 10 to PFX with MMC or PowerShell.
- IIS 8–10: PFX Certificate Import How to import an SSL certificate from a PFX file (PKCS#12) into IIS 8, 8.5, and 10 using MMC or certlm.msc.
- IIS 8, 8.5 & 10: SSL Certificate Installation Install the certificate in IIS 8 to 10 and create HTTPS bindings.
- IIS Crypto: TLS configuration for Windows Server TLS protocols and cipher suites on Windows Server with IIS Crypto.
- Importing PFX certificates on Windows Import a certificate from PFX into Windows Server with certlm.msc, MMC or PowerShell.
- Installing Intermediate Certificates Intermediate certificates (CA bundles) on Windows Server and Linux.
- KEMP LoadMaster Proxy approach that works around KEMP's hard-coded Let's Encrypt binding via FairSSL AutoDNS.
- KeyStore Explorer: A GUI for Java KeyStore and PFX Files Use KeyStore Explorer as a graphical alternative to the Java keytool command line.
- Kubernetes (cert-manager) ClusterIssuer with EAB and ARI renewal. Native ACME inside the cluster.
- Lighttpd SSL Administration Installing and configuring an SSL certificate in the Lighttpd web server on Linux.
- Linux: ACME setup Lego, Certbot and acme.sh for Apache, Nginx, HAProxy and Docker.
- macOS (Lego + LaunchDaemon) Intel and Apple Silicon. Customisable sync script for any service.
- Mozilla SSL Configuration Generator Use Mozilla's SSL Configuration Generator for a secure server configuration.
- Nginx SSL/TLS Configuration Guide SSL/TLS in Nginx with OCSP stapling, secure cipher suites and HTTPS redirect.
- PFX Export (Windows) Export the certificate from Windows Server to PFX with certlm.msc, MMC or PowerShell.
- Plesk SSL Administration Installing an SSL certificate through the Plesk control panel.
- PRTG Network Monitor (ACME) simple-acme + ImportPRTG.ps1. PEM files + automatic Core Service restart.
- PRTG SSL Administration Installing an SSL certificate in PRTG Network Monitor.
- QNAP SSL Administration Installing an SSL certificate on QNAP NAS devices.
- RDP and RD Gateway By hand with PowerShell, Server Manager or Set-RDCertificate, or automated with simple-acme.
- S/MIME Certificate Installation – Microsoft Outlook (Windows) An S/MIME certificate in Outlook on Windows for signing and encryption.
- S/MIME Certificate Setup – Mozilla Thunderbird An S/MIME certificate in Thunderbird for signing and encryption.
- S/MIME Installation for Apple Mail (macOS & iOS) An S/MIME certificate in Apple Mail on macOS and iOS for signing and encryption.
- Sectigo cross-sign on Windows Server The Sectigo R36 intermediate and R46 cross-sign on Windows Server.
- Signing Office Macros (VBA) Sign VBA projects in Excel, Word and PowerPoint with a Code Signing certificate.
- Simple-ACME guide for Windows Server IIS bindings, DNS validation, key types and Task Scheduler automation.
- Simply.com SSL Administration Installing an SSL certificate on Simply.com hosting.
- SonicWall SSL Administration Installing and configuring an SSL certificate on a SonicWall firewall.
- SSL Certificate Administration for IIS 8, 8.5, and 10 IIS on Windows Server 2012 to 2022 with SNI and the Centralized Certificate Store.
- SSL Certificate Installation for Small Business Server 2011 SSL certificates on Small Business Server 2011: Exchange 2010, IIS and Remote Web Access.
- SSL Certificate Management for IIS 7.0 and 7.5 SSL certificates in IIS 7.0 and 7.5: CSR, installation, HTTPS binding and troubleshooting.
- sslbrain ACME Proxy: Certificates without direct internet access Use the built-in ACME proxy in sslbrain to fetch certificates from servers without direct internet access.
- Synology NAS SSL Certificate Administration Install and configure an SSL certificate on your Synology DiskStation NAS using the DSM control panel.
- Tomcat SSL Administration on Windows SSL/TLS in Apache Tomcat on Windows with Java Keystore (JKS) and PKCS12.
- Troubleshooting Certificate Chain Errors Fix 'untrusted certificate' warnings by checking and repairing the certificate chain.
- Updating Company Contact Details in the Danish CVR Register Update company details with the Danish Business Authority for OV and EV validation.
- Webmin SSL Administration Installing an SSL certificate through the Webmin control panel on Linux.
- Windows: ACME setup simple-acme and Posh-ACME on Windows Server for IIS, Exchange, RDP, SQL Server and ADFS.
No guide matches the search and filters.
Ready to create a free account?
Create a free account and order your first certificate. A DV certificate is issued in under 2 minutes.