How do I use ACME with win-acme on Windows?

win-acme is a free ACME client for Windows. Use it if the server already runs it, or you'd rather not use our IIS script.

In Passbeam open the client, then Server certificates, then ACME, and click Add ACME key. Name it after the server. Copy the HMAC key straight away, it's only shown once.

Enlarge

Download win-acme from win-acme.com, open PowerShell as Administrator and run it with your directory URL: .\wacs.exe --baseuri <Directory URL>.

Press M for full options, then 2 to type the host names. Take the defaults until it asks for the key, then paste the Key ID and the HMAC key.

PS C:\win-acme> .\wacs.exe --baseuri <Directory URL>Connection OK! # M: Create certificate (full options)# 2: Manual inputHost: helpdesk.riverside.local This ACME endpoint requires an external account.Key identifier: <Key ID>Key (base64url encoded): ****************************************Downloading certificate [Manual] helpdesk.riverside.localInstalling certificate in the certificate storeAdding Task Scheduler entryCertificate [Manual] helpdesk.riverside.local created

There's no challenge to answer, so it gets the certificate straight away and sets up its own scheduled task to renew it.

When it asks about installation, choose the IIS option if you want win-acme to update the site's binding, or no installation steps if something else uses the certificate.

Use one ACME key per server. Then you can revoke one server's key without touching the others.

Enlarge