Learn how to issue Let’s Encrypt certificate in pfSense Acme. Our pfSense Support team is here to help you with your questions and concerns.

pfSense Acme Let’s Encrypt | How to Enable

pfSense is a powerful firewall and routing solution. With evolving security standards we need to encrypt connections and ensure safe interactions with our network interfaces.

Today, we are going to go through enabling signed Let’s Encrypt certificates on our pfSense Web interface.

1. First, head to Package Manager under System and click Available Packages.
2. Next, we have to search for the Acme package and then click the Install button.
3. After installation, we have to find Acme Certificates under the Services menu.
4. Then, it is time to create our account keys by entering a name and choosing the production server for live usage.
5. Now, we have to click Create new account key to generate a key. Then insert this key into the Account key box.
6. After that click the Register ACME account key and wait for a successful response. Then click Save.
7. Next, click Add button under Certificates and fill in the required details.
8. Furthermore, we have to select our Acme account and choose a key size. Usually, 2048 is the standard.
9. We also have to specify our domain Subject Alternative Name entries. Each domain has to be listed on a separate row.
10. Additionally, we have to determine the validation method for Let’s Encrypt server verification. For instance, if we are using the Standalone HTTP server method, we have to set the listen port to 8080.
11. Then, create a port forwarding rule by heading to Firewall > NAT > Port Forward.
    The rule has to forward port 80 (HTTP) to port 8080 on our pfSense IP address.
12. Next, we have to confirm the rule was automatically created in Firewall > Rules > WAN.

How to issue the Certificate

After everything is in place, we can request the Let’s Encrypt certificate.

1. First, head to Acme under Services and click Certificates.
2. Next, locate the certificate we want to issue or renew and click the Issue/Renew button.

A successful message will let us know that the certificate has been issued or renewed.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

In summary, our Support Techs demonstrated how to issue a Let’s Encrypt certificate in pfSense Acme.