Working with Let's Encrypt certificates

Let’s Encrypt is a global Certificate Authority (CA). This organization is a non-profit and does not charge fees for their certificates. Each certificate is valid for 90 days. RAS Console allows you to issue, automatically renew and revoke Let's Encrypt certificates.

Issuing a Let's Encrypt certificate

To issue a new Let’s Encrypt certificate:

1. Navigate to Infrastructure > Certificates.
2. Click the ellipsis menu ( the [...] icon) and choose Let's Encrypt Settings.
3. Select the I have read and accept Let's Encrypt EULA option.
4. In the Expiration emails field list specify the email addresses that will receive notifications from Let’s Encrypt.
5. Optionally, change the time when certificates are renewed automatically in the Automatically renew certificates before expiration field.
6. Navigate back to Infrastructure > Certificates.
7. Choose Add > Issue Let's Encrypt certificate from the [...] menu and specify the following options:
   • Name: Name of the certificate.
   • Description: Description of the certificate.
   • Usage: HALB and/or Secure Gateway.
   • Key size: Key size.
   • Country code: Code of your country.
   • Full state or province: Name of your state or province.
   • City: Your city.
   • Organization: Name of your organization.
   • Organization unit: Name of your organization unit.
   • E-mail: Email address of your organization.
   • Common name: Valid domain name of a HALB or Secure Gateway.
   • Alternative names: Valid domain names of HALBs or Secure Gateways.
8. Click Issue certificate.

Renewing a Let’s Encrypt certificate manually

To manually renew a Let’s Encrypt certificate:

1. Navigate to Infrastructure > Certificates.
2. Select the certificate that you want to renew.
3. Select Control > Renew from the [...] menu.

Revoking a Let’s Encrypt certificate

To revoke a Let’s Encrypt certificate:

1. Navigate to Infrastructure > Certificates.
2. Select the certificate that you want to renew.
3. Select Control > Revoke from the [...] menu.