v5 Generally Available

Automated SSL/TLS Certificate Management
for Microsoft Azure

Securely manage ACME certificates with Azure Key Vault.
Issue, renew, and deploy certificates across your Azure services with production-ready automation.

5+ Certificate Authorities
11+ DNS Providers
7+ Azure Services

Why Acmebot?

Everything you need for automated certificate management on Azure

Secure by Design

Certificates are stored in Azure Key Vault with managed identity authentication. No secrets to manage.

Fully Automated

Automatic certificate issuance and renewal. Set it up once and forget about certificate expiration.

Dashboard

Dedicated web-based dashboard for certificate management. View status, issue and revoke certificates with ease.

Multi-Domain Support

Issue certificates for Zone Apex, Wildcard and SANs. Manage multiple domains from a single deployment.

Webhook Notifications

Get notified via Slack, Microsoft Teams, or custom webhooks when certificates are issued or renewed.

Multiple CAs

Support for Let's Encrypt, ZeroSSL, Google Trust Services, SSL.com, Entrust, and more ACME v2 CAs.

What's New in v5

Production-ready on Azure Functions Flex Consumption for modern cloud workloads

Flex Consumption

Built on Azure Functions Flex Consumption for cost-effective, event-driven scaling in production environments.

Built-in VNET Integration

Native virtual network integration support for secure private connectivity to internal Azure resources.

.NET 10

Runs on .NET 10 for the latest platform improvements, performance updates, and long-term maintainability.

Supported Azure Services

Deploy certificates across your entire Azure infrastructure

App Service
App Service Web Apps / Functions / Containers
Container Apps
Container Apps Including custom DNS suffix
Front Door
Front Door Standard / Premium
Application Gateway
Application Gateway v2
API Management
API Management Custom domains
SignalR Service
SignalR Service Premium tier
Virtual Machines
Virtual Machines Custom certificate deployment

DNS Providers

Automatic DNS-01 challenge validation with built-in integrations and custom extensibility

Azure DNS
Azure Private DNS
Cloudflare
Amazon Route 53
Google Cloud DNS
GoDaddy
Akamai Edge DNS
DNS Made Easy
Gandi LiveDNS
TransIP DNS
Custom DNS

Need another provider? Custom DNS support lets you integrate virtually any DNS service through Azure Functions.

Certificate Authorities

Includes first-class support for popular ACME v2 Certificate Authorities

Let's Encrypt Free

The most widely used free CA. No additional credentials required.

ZeroSSL EAB

Free SSL certificates with ACME support and REST API.

Google Trust Services EAB

Google's public Certificate Authority for trusted certificates.

SSL.com EAB

Commercial CA offering free 90-day certificates via ACME.

Entrust EAB

Enterprise-grade certificates with ACME automation support.

Deploy to Azure

One-click deployment to your Azure subscription

v5Recommended

Production-ready deployment on Azure Functions Flex Consumption with built-in VNET integration support.

  • Flex Consumption plan
  • Built-in VNET integration
  • .NET 10 runtime
v4Legacy

Maintenance path for existing deployments. Plan migration to v5 before .NET 8 support ends in November 2026.

  • Consumption plan (Y1)
  • .NET 8 runtime

Also available on Terraform Registry

Get Started in Minutes

Three simple steps to automated certificate management

1

Deploy

Choose the v5 Deploy to Azure option and configure your deployment with the Azure Portal wizard.

2

Configure DNS

Grant the managed identity access to your DNS zone for automatic DNS-01 challenge validation.

3

Issue Certificates

Use the built-in dashboard to issue your first certificate. Renewals happen automatically.

Sponsors

Thank you for your support of our development

Interested in supporting the project?

Become a Sponsor

Open Source

Apache License 2.0 — free to use, forever