https://sdn-warrior.org/tags/letsencrypt/ Recent content in Letsencrypt on SDN-Warrior | Daniel Krieger Hugo en-US Daniel Krieger Sat, 05 Sep 2026 01:00:00 +0200 https://sdn-warrior.org/posts/vcf9.1-lets-encrypt-automation/ Sat, 05 Sep 2026 01:00:00 +0200 https://sdn-warrior.org/posts/vcf9.1-lets-encrypt-automation/ <h2 id="introduction">Introduction</h2> <p>If this were a marketing-driven blog, I’d call my pipeline C.E.R.B.E.R.U.S. - short for Certificate Exchange, Renewal &amp; Backend Engine for Reliable Unified Security. But we’re dealing with a deadly serious topic here: certificates! And who hasn’t experienced that beautiful moment after deploying VCF 9.1 and Google Chrome clearly reminds you that you’re still using a self-signed certificate? Been there, done that.</p> <p>But enough with the jokes. I want to use the pipeline to solve more than just one certificate warning. My goal is to ensure that my entire VCF setup-including Fleet and Management as well as Workload Domain components-is fully and automatically provisioned with valid certificates. The whole process should be Git-driven and declarative. I also want to rely on the ACME standard, since VCF natively only supports automatic certificate enrollment with a Windows-based CA, which unfortunately comes with several drawbacks.</p>