Requesting a Let's Encrypt Certificate

Let’s Encrypt is a global Certificate Authority (CA). This organization is a non-profit and does not charge fees for their certificates. Each certificate is valid for 90 days. RAS Console allows you to issue, automatically renew and revoke Let's Encrypt certificates.

Issuing a Let's Encrypt certificate

To issue a new Let’s Encrypt certificate:

1. In the RAS Console, navigate to Farm > Certificates.
2. Click the [+] button to the left of the Tasks drop-down menu and select Issue Let's Encrypt certificate.
3. Select the I have read and accept Let's Encrypt EULA option.
4. In the Expiration emails field list specify the email addresses that will receive notifications from Let’s Encrypt.
5. Optionally, change the time when certificates are renewed automatically in the Automatically renew certificates before expiration field.
6. Click OK.
7. In the Issue Let's Encrypt certificate dialog, specify the following:
   • Name: Name of the certificate.
   • Description: Description of the certificate.
   • Usage: HALB and/or Secure Gateway.
   • Key size: Key size.
   • Country code: Code of your country.
   • Full state or province: Name of your state or province.
   • City: Your city.
   • Organization: Name of your organization.
   • Organization unit: Name of your organization unit.
   • E-mail: Email address of your organization.
   • Common name: Valid domain name of a publicly accessible HALB or Secure Gateway.
   • Alternative names: Valid domain names of a publicly accessible HALBs or Secure Gateways.
8. Click Save.

Renewing a Let’s Encrypt certificate manually

To manually renew a Let’s Encrypt certificate:

1. In the RAS Console, navigate to Farm > Certificates.
2. Right-click the Let’s Encrypt certificate that you want to renew.
3. In the context menu, select Control > Renew.

Revoking a Let’s Encrypt certificate

To revoke a Let’s Encrypt certificate:

1. In the RAS Console, navigate to Farm > Certificates.
2. Right-click the Let’s Encrypt certificate that you want to revoke.
3. In the context menu, select Control > Revoke.
4. In the Revoke Certificate dialog, select the reason why you want to revoke the certificate.
5. Click Revoke.