26.2. Enabling the ACME service in IdM

Procedure

1. Enable ACME across the whole IdM deployment:

   # ipa-acme-manage enable
   The ipa-acme-manage command was successful

2. Set ACME to automatically remove expired certificates from the CA:

   # ipa-acme-manage pruning --enable --cron "0 0 1 * *"

   注意

   Expired certificates are removed after their retention period. By default, this is 30 days after expiry.