Kryptkeeper
Walkthrough · 15 steps

Set up ACME for a server

Create a provisioner and EAB key, then point an ACME client at it.

As pki-admin

  1. Open /acme

    Open /acme
  2. Click Provisioners

    Click Provisioners
  3. Click New provisioner

    Click New provisioner
  4. Fill Name with "internal-acme-2"

    Fill Name with "internal-acme-2"
  5. Select "Acme Issuing CA" in CA

    Select "Acme Issuing CA" in CA
  6. Fill Allowed names with "*.acme.test"

    Fill Allowed names with "*.acme.test"
  7. Tick http-01

    Tick http-01
  8. The filled provisioner dialog

    The filled provisioner dialog
  9. Click Save

    Click Save
  10. Locate Copy directory URL for internal-acme-2

    Locate Copy directory URL for internal-acme-2
  11. Click EAB keys

    Click EAB keys
  12. Click New key

    Click New key
  13. Fill Label with "cert-manager-prod"

    Fill Label with "cert-manager-prod"
  14. Click Create key

    Click Create key
  15. Click Done