New to CTW, and ACME automation in general. Successfully used CTW to automate certificate issuance from HID/Indentrust, this process required me to create new CA, etc
So my question: Can I templatize CTW with required additional configuration, rather than manually making changes on each host? Where/how is CTW configuration stored?
Hi Steve,
For Certify Certificate Manager (the desktop app installed on servers) the config is stored under C:\ProgramData\certify however certain aspects are encrypted (CA accounts, stored credentials etc) at the machine level and are not transferable from machine to machine with just a file copy.
You may be able to use our command line to automate some tasks such as creating a CA account:
The actual definition of the CA API endpoints etc are stored in C:\ProgramData\certify\ca.json, so you would need to copy that over first, then restart the Certify Service for it to pick up the new CA, then use certify acmeaccount add with the required parameters to create a CA account. If you need the same CA account per machine you would currently need to use the UI to add the CA account with the same account key.
We’re working on a new product called Certify Management Hub which might be of interest. To register your interest for the beta and tell us about your requirements a bit more you can email support at certifytheweb.com. We were toying with the idea of being able to sync a primary CA account definition to instances (either shared account key or just same account email etc) but we’re working with our own imagined need for that, rather than a concrete customer requirement, so that feature doesn’t exist yet.