Issuing Certificates with Edgenexus SSL Certificate Manager
The Edgenexus SSL Certificate Manager configuration is performed using a wizard-based system and so is very easy to use.
When you launch the user interface, you will see a page similar to the image below. You can see that you can perform two tasks with the Edgenexus SSL Certificate Manager: Issue Certificates and Import Certificates.
The import certificates function is used to migrate from another platform such as F5 and import SSL certificates in bulk.
The Edgenexus SSL Certificate Manager work in conjunction with Let's Encrypt to allow the generation and issuance of Let's Encrypt SSL certificates in real-time, including automatic renewal of the SSL certificate.
· Click the Issue Certificate button to begin the issuance process.
· The page will change to the one you see below.
· As you can see, various items are need configuration so that you can issue an SSL certificate.
Field
Description
CA
Currently, only the Let's Encrypt option is available. In the future, as more providers become available, we will include them here.
Domain
The domain field is used to specify the FQDN for which the certificate is required. For example, www.acme.com, or *.acme.com in the case of a wildcard.
NOTE: The FQDN you place here must be reachable via DNS query.
Virtual Service
A virtual service must be online and work on HTTP port 80 to answer a challenge request by the Let's Encrypt system. This virtual service must follow the guidance provided in the chapter on prerequisites.
Auto-Renew
When enabled at the time of issuance, the certificate will be set to auto-renew.
Test with staging environment
Use the Let's Encrypt staging server to issue a new certificate (for testing).
Force certificate renewal
If your Let's Encrypt certificate is already issued and not expired, you won't be able to issue a new certificate without enabling this option.
Once you have completed the form, click the Issue Certificate button to proceed to the verification stage.
· Once you click the Issue Certificate button, the Edgenexus SSL Certificate Manager begins the process of verification with the Let's Encrypt or other ACME certificate system supported within the Edgenexus SSL Certificate Manager.
· You will see a screen similar to the one below as the process finishes.
· The Edgenexus SSL Certificate Manager will store the SSL certificate you created in the EdgeADC's SSL Store if the process is successful.
· The Edgenexus SSL Certificate Manager will display the following error if the process encounters any problem.
The certificates you have issued will be listed on the launch page of the App.
The contents of Issuing Certificates with Edgenexus SSL Certificate Manager
