How granular are InCommon credentials

Help
1

Is it possible to have one set of ACME credentials that can only be used to renew existing certificates (not request a new one)? We would like to put our credentials in the Certbot cli.ini file, but we have some admins w/root access for whom we do not want to give access to request new certs in InCommon.

So, one set of credentials we enter on the CLI to request the first cert; another that we store in the cli.ini file for future renewals by the system.

TIA.

gary bennett

2

Let's Encrypt doesn't use "credentials" at all, so I'd say no. But if you're asking about some other certificate authority, I don't think we could speak to that.

4 Likes
3

Yes, I understand. Was interested in InCommon credentials. More appropriate to ask the question, there. Thanks.

1 Like