# Certificate Of A firewall **URL:** \ **Category:** Help\ **Created:** [October 12, 2020, 1:39pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829 "2020-10-12T13:39:40Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Hoygen83](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/hoygen83/32/43602_2.png) [@Hoygen83](https://community.letsencrypt.org/u/Hoygen83)\ **Post date:** [October 12, 2020, 1:39pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/1 "2020-10-12T13:39:40Z")
Hello, I have a zyxel firewall, it can generate self signed certificates, is it possible to have / use a certificate generated and signed by Let's encrypt? I mean can I generate a certificate signed from let'sencrypt and use it inside a machine not connected to the domain? Or should I sign somehow the certificate generated by the firewall? Kindest Regards. ---
**Author:** ![bruncsak](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruncsak/32/18414_2.png) [@bruncsak](https://community.letsencrypt.org/u/bruncsak)\ **Post date:** [October 12, 2020, 2:20pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/2 "2020-10-12T14:20:16Z")
Does your zyxel firewall generate certificate request as well, which you can download to sign? If yes, and as long as the domain name in the certificate request is public and you have control over that domain, it is possible to sign it with Let's Encrypt's CA. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 12, 2020, 3:23pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/3 "2020-10-12T15:23:22Z")
> [@Hoygen83](#): > > can I generate a certificate signed from let'sencrypt and use it inside a machine not connected to the domain? Please clarify your use case: Which machine? Which domain? What will you secure? ---
**Author:** ![Hoygen83](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/hoygen83/32/43602_2.png) [@Hoygen83](https://community.letsencrypt.org/u/Hoygen83)\ **Post date:** [October 12, 2020, 3:59pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/4 "2020-10-12T15:59:16Z")
Hi, the machine is a firewall Zyxel 1900 It has a certificate self signed used for the login page into the firewall and if someone uses the web captive portal he will reach a web page being forwarded by the firewall and get a security warning, since the certificate used is self signed by the firewall. The domain is not relevant at the moment i can rename the firewall and the domain. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 12, 2020, 4:12pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/5 "2020-10-12T16:12:37Z")
I guess the "inside" threw me off. Then the only problem I see is automation. You will most likely find a way to get an LE cert into the firewall but LE certs only last 90 days. ---
**Author:** ![Hoygen83](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/hoygen83/32/43602_2.png) [@Hoygen83](https://community.letsencrypt.org/u/Hoygen83)\ **Post date:** [October 13, 2020, 9:16am UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/6 "2020-10-13T09:16:30Z")
I have a strict procedure to follow in the device. here it is: [https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=003075&lang=EN](https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=003075&lang=EN) do you think it is compatible with letsencrypt procedures? ---
**Author:** ![bruncsak](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruncsak/32/18414_2.png) [@bruncsak](https://community.letsencrypt.org/u/bruncsak)\ **Post date:** [October 13, 2020, 1:33pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/7 "2020-10-13T13:33:45Z")
For the first reading your `zyxel` device provides enough PKI feature that it might be compatible with Let's Encrypt. You may have to play with it. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 13, 2020, 2:24pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/8 "2020-10-13T14:24:20Z")
> [@Hoygen83](#): > > do you think it is compatible with letsencrypt procedures? It may work if you choose "Host Domain Name" ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/2/5/257af734f44c4d46761935e3f3794f10fb144a99.png) enter an FQDN for which you control the DNS zone (a domain name you own) and complete the authentication process with the generated CSR. This all, of course, is an extremely manual process - which must be repeated each time before the cert expires (90 day max). ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 12, 2020, 2:24pm UTC](https://community.letsencrypt.org/t/certificate-of-a-firewall/135829/9 "2020-11-12T14:24:24Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.