Skip to content
Tatsuro Shibamura edited this page Mar 7, 2026 · 16 revisions

Acmebot Documentation

Acmebot automates the issuance, renewal, and revocation of ACME certificates with Azure Key Vault. It is designed for Azure-hosted workloads that need reliable certificate lifecycle management without manual renewal work.

What you need

Prepare the following before you start:

  • An Azure subscription
  • An Azure Key Vault
    • You can use an existing vault, or create one during deployment
  • A DNS provider for the public zone you want to validate
  • An email address for ACME account registration

Start here

If you are deploying Acmebot for the first time, use these pages in order:

  1. Getting Started
  2. DNS Provider Configuration
  3. External Account Binding if your ACME CA requires it
  4. App Role-Based Authorization if you want role-based access control for issuance and revocation

Documentation map

Deployment and setup

Security and authorization

Operations and integration

Community resources

Typical workflow

  1. Deploy Acmebot to Azure.
  2. Configure the DNS provider used for DNS-01 validation.
  3. Enable authentication and optional role-based authorization.
  4. Issue certificates from the dashboard or API.
  5. Let Acmebot renew certificates automatically and consume them from Azure services.

Clone this wiki locally