ACME Profile
ACME Profile specifies the configurations of the ACME server behaviour. ACME Account that is registered to the ACME Profile follows the behaviour.
It holds the configuration listed below:
| Configuration | Purpose | Default Value | Mandatory |
|---|---|---|---|
| Name | ACME Profile Name | Yes | |
| Description | Description of the ACME Profile | None | No |
| Terms of Service URL | URL for the Terms of Service the client has to agree | None | No |
| Website URL | Website URL containing additional information | None | No |
| DNS Resolver IP | IP of the DNS resolver if a custom DNS is used | System default DNS | No |
| DNS Resolver Port | Port of the DNS resolver | 53 | No |
| Retry Interval | Retry interval in seconds to be set in the Retry-After header | 30 | No |
| Order Validity | Order validity in seconds | 10 Hours | No |
| Disable new Orders (Change in Terms of Service) | Disable new Order requests until the new Terms of Service are agreed | false | No |
| Changes in Terms of Service URL | New Terms of Service URL that will be set if the Disable new Order is configured | None | No |
| Require Contacts for new Accounts | Specifies whether the contacts are required for registering a new account | false | No |
| Require agree to Terms of Service | Specifies whether the Terms of Service must be agreed for new account registration | false | No |
| RA Profile | RA Profile that will be set as default for this ACME Profile | None | No |
By default ACME Profiles will be created without any default RA Profile, if not selected any.
Attributes for certificate management
If a default RA Profile is selected then Attributes to issue certificates and revoke certificates must be configured, if needed.
Certificate management Attributes for ACME Profile are used during finalize of the ACME Orders or ACME revocation requests and cannot be changed by the ACME client.
Operations on ACME Profile
The following operations can be performed on the ACME Profile:
| Operation | Description |
|---|---|
| Create | Create a new ACME Profile. Create ACME Profile is disabled by default |
| Update | Update configuration of already created ACME Profile |
| Delete | Delete existing ACME Profile |
| Disable | Disable ACME Profile. All request to disabled ACME Profile will be rejected |
| Enable | Enable ACME Profile |
ACME Profile should be in enabled state for the clients to use it. If the ACME Profile is disabled, the server throws error that the profile is not enabled and cannot process any requests.