ACMEv2 clients must use the following URL to communicate with Certificate Enrollment Gateway:

https://<CEG-server>/acme/<tenant-ID>/<CA-ID>/<profile-ID>/directory

Where:

  • <CEG-server> is the hostname or IP address of the Certificate Enrollment Gateway server.
  • <tenant-ID> is the unique identifier of a tenant defined in Certificate Enrollment Gateway. The value is case-sensitive.
  • <CA-ID> is the CA ID of the Certificate Authority (CA) defined in CA Gateway that will issue certificates to the ACMEv2 endpoint.
  • <profile-ID> is the profile ID defined in CA Gateway that defines the certificate type issued to the ACMEv2 client. For Entrust PKI as a Service, the profile ID is one of the following:
    • privatessl-tls-client-server
    • privatessl-tls-server
    • privatessl-tls-client

For example:

https://cegserver.example.com/acme/tenant1/example_ca1/privatessl_tls_client/directory