ACME for DCM

Simplify certificate acquisition and renewal

ACME is a great protocol for automating the process of certificate issuance and renewal. It eliminates the need for manual intervention and reduces the risk of errors. We use Let's Encrypt as our preferred ACME provider but the tool is designed to work with any ACME provider. Let's Encrypt is a great, free certificate authority available to all. You can find more information about Let's Encrypt The beauty of Let's Encrypt is that it's free, the challenge is that a certificate lifetime is just 90 days. Which means that it will need to be renewed frequently. ACME for DCM solves that problem by simplifying and automating the process.

Automate certificate acquisition and renewal

The renewal of TLS certificates can be done manually which can be error-prone and time consuming. ACME for DCM provides a simple, easy to use UI. Website configuration values are stored for easy retrieval and management. Multiple websites with variable renewal options can be configured. Both HTTP-01 and DNS-01 challenge types are supported. Scheduled jobs will check and renew certificates without intervention. Automated update of DNS TXT records for DNS-01 challenges for GoDaddy accounts is supported and more plugins for other DNS providers are planned.

Why automate SSL certificates on IBM i?

Managing TLS certificates manually on IBM i systems can lead to outages and security risks. It uses resources that could be better used elsewhere in your organization. Keep your TLS certificate renewals simple and efficient using ACME for DCM.

Features

Certificate Management

• Automated SSL Certificate Provisioning - Request and renew ACME certificates
• HTTP-01 Challenge Support - Web-based domain validation
• DNS-01 Challenge Support - DNS-based domain validation for wildcard certificates
• Real-time Processing - Server-Sent Events (SSE) for live certificate request updates
• Certificate Dashboard - View all certificates in IBM i *SYSTEM store
• Smart Filtering - Automatically hide private keys and optionally filter CA certificates

User Management

• IBM i Authentication - Secure login using IBM i user profiles
• JWT Token Security - Stateless authentication with JSON Web Tokens
• User Profiles - Display full name from IBM i, manage email and phone
• Role-Based Access - Security officer access control for certificate operations

Modern UI/UX

• Responsive Design - Works on desktop, tablet, and mobile devices
• Dark Mode Support - Light, Dark, and Auto (system preference) themes
• Loading Indicators - Clear visual feedback for all operations
• Real-time Updates - Live progress messages during certificate processing
• Push Notifications - Browser notifications for certificate expiration warnings

Configuration Management

• Save/Load Configurations - Store multiple ACME configurations
• Configuration Validation - Real-time form validation
• User-Specific Configs - Each user manages their own configurations

Integrate directly with Digital Certificate Manager

There are plenty of solutions available to script renewals of TLS certificates. ACME for DCM takes it one step further by providing complete integration with the Digital Certificate Manager (DCM). The renewed certificate is downloaded and then automatically imported into DCM. ACME for DCM provides an end to end solution where you can set and then forget your ACME TLS certificate renewal cycle.

Frequently Asked Questions

What is ACME for DCM?

ACME for DCM is a tool that automates SSL certificate management on IBM i systems...

Does it support Let's Encrypt?

Yes, it supports Let's Encrypt and other ACME providers...

How does it work with DCM?

ACME for DCM helps with creating the TLS certificates, scheduling updates and automatically importing the updated certificate directly into DCM.