Available in Classic and VPC
In ACME, you can view the Directory URL required for ACME client integration and manage the EAB (External Account Binding) Key used for authentication. This method is supported only when issuing Advanced certificates.
For more information, see Automatic management of ACME-based certificates.
Configure ACME menu
The ACME menu includes the following components:
| Component | Description |
|---|---|
| ① Menu name | Display the current menu name and the total number of registered EABs. |
| ② Basic features | Key tasks available in ACME.
|
| ③ Revocation | Revoke the selected EAB so that it can no longer be used. |
| ④ EAB list | Display the list of registered EABs.
|
How to issue EAB key
Follow the following steps to issue an EAB key in ACME.
- From NAVER Cloud Platform console, navigate to Menu > Services > Security > Certificate Manager > ACME.
- Click [Issue EAB key].
- Enter and verify the following items in the settings window.
- Alias: Enter a name to identify the EAB key.
- Product: You can select either a DV or OV product from the Advanced product line.
- Accounts registered under this EAB can only issue certificates for the selected product type.
- Organization: When selecting an OV product, choose the organizational information to be included in the "O" (Organization) field of the certificate. (Only information about active organizations is displayed.)
- By pinning organization information, security is enhanced as OV certificates are issued only to the organization specified for that domain.
- Validity period: Set the maximum validity period for certificates issued via the ACME client. (Select from 198 days, 90 days or 30 days.)
- As long as your order subscription is valid, you can have it reissued an unlimited number of times at no additional cost.
Configure validation method
When issuing certificates based on ACME, certificates can only be issued using the configured validation method.
- DNS-01 method: A new validation value is registered in DNS each time a certificate is issued. It uses the ACME standard protocol as-is, and requires the client to configure automation scripts.
- Pre-validation method: Reuse the DNS TXT validation information you previously completed in Domains. You can issue certificates immediately without any additional steps while the validation period is valid, which simplifies management.
The issued EAB key and HMAC key can only be verified at the time of their initial creation. Since this information cannot be verified if lost, be sure to record it separately and keep it in a safe place.
Revoke EAB
If you decide to revoke EAB, keep the following matters in mind.
- Certificate issuance and management using the ACME client based on the revoked EAB information will be discontinued immediately.
- This will not affect certificates that have already been issued, but automatic renewal and other functions will no longer be available.