Fail to update email address for ACME Account

Help
1

Details:
A former employee previously managed our IIS web server and Let's Encrypt integration via win-acme (WACS). I’ve now taken over management responsibilities.
While attempting to update the ACME account contact information, I ran the following steps:

  1. Launched wacs.exe
  2. Navigated to: More options > ACME account details
  3. At the prompt:
  4. Enter email(s) for notifications about problems and abuse (comma-separated):
    I entered: (my email address)

Although the --verbose logs indicate the request was successfully sent:
[DBUG] Send POST request to https://acme-v02.api.letsencrypt.org/acme/acct/(account number)
[VERB] Request completed with status OK
[DBUG] Send POST request to https://acme-v02.api.letsencrypt.org/acme/new-acct
[VERB] Request completed with status OK
[DBUG] Saving account to C:\ProgramData\win-acme\acme-v02.api.letsencrypt.org\Registration_v2

The ACME account status still returns:
Contact(s): (none)
Initial IP: (missing or blank) <-- should show my email address

Troubleshooting performed:
• Outbound HTTPS access to https://acme-v02.api.letsencrypt.org/ is working (verified using curl)
• Attempted re-entry of email multiple times
• Confirmed there are no errors in local WACS logs
• No proxy or deep packet inspection tools are interfering based on network checks

Request for Assistance:
• Can someone please confirm whether the contact update request is being fully accepted by Let’s Encrypt’s ACME API?
• Are there known issues with email address changes not persisting under existing accounts?
• Is there any further diagnostic trace or action I can provide from win-acme to assist with resolution?

Thank you for your support.
Kiet

1 Like
2

Welcome @Kiet8

Yes, Let's Encrypt no longer connects an email address to an ACME Account.

See: Ending Support for Expiration Notification Emails - Let's Encrypt

The email is not returned in the order object which is why you are not seeing it.

6 Likes
3

Thank you MikeMcQ!

3 Likes
4

In addition to this you should also consider migrating to simple-acme or another ACME tool as win-acme is no longer being maintained by the core developer and they have moved their efforts to the simple-acme project instead.

3 Likes
5

Adding to the above:

Initial IP was deprecated separately and is unrelated. It was not part of the ACME spec, and did not receive an API announcement.

2 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.