The Certificates screen includes the ACME DNS-Authenticators widget that displays a list of configured authenticators. The Automatic Certificate Management Environment (ACME) DNS-Authenticators screen allows users to automate certificate issuing and renewal. The user must verify ownership of the domain before TrueNAS allows certificate automation.

ACME DNS is an advanced feature intended for network administrators or AWS professionals. Misconfiguring ACME DNS can prevent you from accessing TrueNAS.

Each authenticator listed is a link that opens the Edit ACME DNS-Authenticator screen for the selected authenticator.

Automatic Certificate Management Environment (ACME) DNS authenticators allow users to automate certificate issuing and renewal. The user must verify ownership of the domain before TrueNAS allows certificate automation.

ACME DNS is an advanced feature intended for network administrators or AWS professionals. Misconfiguring ACME DNS can prevent you from accessing TrueNAS.

The system requires an ACME DNS Authenticator and CSR to configure ACME certificate automation.

To add an authenticator,

TrueNAS allows users to automatically generate custom domain certificates using Let’s Encrypt.

• An email address for your TrueNAS admin user.
• A custom domain that uses Cloudflare, DigitalOcean, Amazon Route 53, or OVHcloud.
• A DNS server that does not cache for your TrueNAS system.

Go to Credentials > Certificates and click ADD in the ACME DNS-Authenticators widget.