aethercert
Integrations

Where certificates come from and where they go

29 first-party deployment packages, public and private certificate authorities, and 217 DNS providers. Each page lists the exact versions, authentication and prerequisites.

Get started free Deployment targets
An excerpt of a first-party Target Registry manifest.
Microsoft and Windows Server

Windows roles, configured locally by a Windows agent in PowerShell.

Microsoft IISImport, bind to the HTTPS site binding, verify and clean up.Microsoft Exchange ServerImport, enable for IIS/SMTP/POP/IMAP, verify, clean up.Remote Desktop Services and RDPRDS role certificates and the RDP listener on each host.Microsoft SQL ServerImport, grant key access, set for the instance, restart.Microsoft AD FSImport, grant the AD FS account key access, assign, clean up.Windows Remote Management (WinRM)Import and recreate the WinRM HTTPS listener.Hyper-V ReplicaImport and set the replication certificate on each Hyper-V host.Skype for Business ServerImport and assign with Set-CsCertificate.
Citrix and VMware

Application delivery, virtual desktops and vCenter.

Citrix NetScaler ADCUpload over NITRO, update the sslcertkey, save the config.Citrix StoreFrontImport, update the IIS binding, verify, roll back on failure.VMware Horizon Connection ServerImport as vdm, restart the Connection Server service, clean up.VMware vCenter ServerReplace the Machine SSL certificate over the vSphere REST API.
Load balancers

Certificates and profiles updated over the appliance API or on the host.

F5 BIG-IPUpload over iControl REST, update objects and the client-SSL profile.Progress Kemp LoadMasterReplace the certificate in place, optionally bind it to a virtual service.HAProxyWrite the combined PEM bundle and reload HAProxy.
Firewalls

Certificates imported and activated over the management API.

Fortinet FortiGateImport over the FortiOS REST API, globally or per VDOM.Palo Alto Networks PAN-OSImport the keypair over the XML API, then commit.Sophos FirewallUpload through the Sophos Firewall XML API.WatchGuard FireboxCreate and install through the WatchGuard Cloud API.Cisco Secure Firewall Management CenterCreate or update the internal certificate object, then deploy.
Virtualization

Hypervisor management interfaces.

Nutanix PrismImport the SSL certificate through the Prism API.Proxmox VEUpload a custom node certificate with an API token.
Linux and containers

Web servers, file-based services, Docker and Kubernetes.

nginxWrite the files, reload nginx, verify the served certificate.Linux servers (Apache, Postfix, Dovecot)Write PEM files and reload any systemd service.Docker containersCopy into the container, then signal or restart it.KubernetesCreate or update a kubernetes.io/tls secret.
Certificate authorities

Public ACME CAs, AD CS and commercial certificates.

ACME certificate authoritiesLet's Encrypt, Google Trust Services, ZeroSSL, SSL.com, Actalis, step-ca.Active Directory Certificate Services (AD CS)Issue from your AD CS templates through a connector on the CA.PSW GroupCommercial certificates ordered by a connector on your server.
DNS providers

Automatic DNS-01 validation.

DNS providersDNS-01 automation with 217 providers, wildcards included.

Not listed?

Any system with a REST API can get a Target Registry package, and a custom PowerShell or shell script covers the rest.

Target Registry

Where certificates come from and where they go

29 first-party deployment packages, public and private certificate authorities, and 217 DNS providers. Each page lists the exact versions, authentication and prerequisites.

Get started free All features

Community plan, no card required. Open registration - your account is ready in a few minutes.