"Secardeo certACME automates the time-consuming enrollment and renewal of server certificates in an organization and helps to avoid downtimes."

Avoid downtime and lower costs!

• Automatic certificate renewal prevents from outages due to expired certificates.
• Constantly decreasing lifetimes of server TLS certificates need frequent renewals.
• Each manual certificate renewal will cause internal costs.

Central control of certificate enrollment.

• ACME challenge validation via HTTP or DNS.
• Optional server whitelisting.
• Certificate management in a central database.
• Auditable certificate management processes.

Secardeo certACME is a proxy for the automatic registration of web server certificates using the ACME protocol (Automatic Certificate Management Environment). The lifetime of public TLS certificates, currently one year, is decreasing more and more, which is why automated certificate management is urgently required. The unavailability of web servers due to expired certificates can lead to massive financial damage. The ACME protocol is used to automate the interactions between certification authorities and web servers. It was developed for the free Let’s Encrypt CA service. However, many organizations prefer to use certificates from a commercial CA under a well-defined contract for public web servers. Or internal certificates from a Microsoft CA are used. certACME can be used to issue certificates from public certification authorities such as SwissSign or Digicert or an internal Microsoft CA. All certificates are stored in the central TOPKI certificate database. This ensures complete control over the certificates and auditable certificate management processes.

certACME integrates easily as a Microsoft IIS web application and acts as an ACME server for ACME clients.  It validates the certificate requests using a HTTP challenge and forwards the CSR to the connected public or private CA. Optionally, certACME enhances a CSR with corporate attributes like Organization, Country, OU. certACME stores all certificates in a local or central SQL database. certACME automatically sends configurable notifications to certificate managers and administrators.