Generating Cert for Locked Down Appliance

[juacosta]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: ciscomsx.com

I ran this command: I cannot install certbot on the appliance platform

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version): Ubuntu 18.04.5 LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): No, Locked down appliance

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

[JuergenAuer]

Hi @juacosta

@juacosta

I can login to a root shell on my machine (yes or no, or I don't know): No, Locked down appliance

if you don't have root access, you may not be able to install a certificate.

So only a platform integrated solution may work -->> ask your provider.

Read

How It Works - Let's Encrypt

[Osiris]

You can always generate a certificate on a different device using the dns-01 challenge if you have access to the DNS zone of the domain for which you want the certificate.

However, as @JuergenAuer already said: if you have a certificate, what can you actually do with it?

Also, there are numerous certificates for subdomains of your (?) domain issued already. Looks like the IT department of your company already has some experience with a few CAs, including Let's Encrypt.

[webprofusion]

As an aside, I really don't recommend holding/using that domain unless you work at cisco, and if you do work for cisco I think you should be able to find someone internally to fix that for you and you should log a ticket with support

Locked down appliances can still be proxied behind another server if required, the appliance itself doesn't have to directly handle internet facing requests.