# Installing Certificates for Let's Encrypt using ACME on Azure

**URL:** <https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828>\
**Category:** Issuance Tech\
**Created:** [August 28, 2019, 7:29am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828 "2019-08-28T07:29:24Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guttorm](https://avatars.discourse-cdn.com/v4/letter/g/bc79bd/32.png) [@Guttorm](https://community.letsencrypt.org/u/Guttorm)\
**Post date:** [August 28, 2019, 7:29am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/1 "2019-08-28T07:29:24Z")

</div>

Hi.

My Company is using Let’s Encrypt for Certificates on App Services in Azure.

Today I received the following message, when I tried to renew one of our sites certificates:

“detail”: “Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See [End of Life Plan for ACMEv1](https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430) for details.”,

So, my question is simple. What do I do in order to renew my Let’s Encrypt Certificates ?

There are numerous suggestions on the internet, but none specifically point to Azure.

Regards

Guttorm Haaversen  
Go Mobile AS  
Kristiansand  
Norway

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [August 28, 2019, 7:32am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/2 "2019-08-28T07:32:40Z")

</div>

Hi @Guttorm

> [@Guttorm](#):
>
> “detail”: “Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See [End of Life Plan for ACMEv1](https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430) for details.”

you have two options:

- Change your setup, so you can use an existing account instead of creating a new account (or, better)
- switch to an APIv2 - client

Check

> **[ACME Client Implementations - Let's Encrypt](https://letsencrypt.org/docs/client-options/)**
>
> Last updated: Jul 22, 2023 | See all Documentation Let’s Encrypt uses the ACME protocol to verify that you control a given domain name and to issue you a certificate. To get a Let’s Encrypt certificate, you’ll need to choose a piece...

to find one.

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [August 28, 2019, 7:45am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/3 "2019-08-28T07:45:46Z")

</div>

ACME v1 account registrations seem to be disabled only on staging ([acme-staging.api.letsencrypt.org](http://acme-staging.api.letsencrypt.org)) as part of a brown-out period:

> [@End of Life Plan for ACMEv1](https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/2):
>
> I…

I'm not sure why the Azure ACME client would be using the staging environment for live certificates.

I'm not sure whether [GitHub - sjkp/letsencrypt-siteextension: Azure Web App Site Extension for easy installation and configuration of Let's Encrypt issued SSL certifcates for custom domain names.](https://github.com/sjkp/letsencrypt-siteextension) (which I guess you are using) supports ACMEv2 or not. It seems to - maybe you need to upgrade the extension or the configuration you are using somehow?

---

<div class="post-metadata">

**Author:** ![Guttorm](https://avatars.discourse-cdn.com/v4/letter/g/bc79bd/32.png) [@Guttorm](https://community.letsencrypt.org/u/Guttorm)\
**Post date:** [August 28, 2019, 8:14am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/4 "2019-08-28T08:14:27Z")

</div>

Hi. I have resolved this now. The first three sites worked out fine this morning.  
The remaining three failed. But when I ticked, restart site, the renewal was ok.  
I am not sure why.

It seems that I upgraded to ACME 2 (see video: [https://www.youtube.com/watch?v=C6V\_mBo-gnE](https://www.youtube.com/watch?v=C6V_mBo-gnE)) in Juni when I last renewed Let’s Encrypt. I was not aware that that’s what I did in june !

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [August 28, 2019, 8:18am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/5 "2019-08-28T08:18:11Z")

</div>

> [@Guttorm](#):
>
> Can I simply upgrade this; is this what you mean by change your setup, if so how do I change the setup ?

Try it. I've never used that client (and never used Acme.v1, started with v2), so I don't know how that works.

And the normal setup shouldn't create new accounts. Create one account and use that permanent.

---

<div class="post-metadata">

**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\
**Post date:** [August 28, 2019, 10:01am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/6 "2019-08-28T10:01:46Z")

</div>

Also, if you need to change the client, this one is not yet on the list: [https://github.com/letsencrypt/website/pull/631/files](https://github.com/letsencrypt/website/pull/631/files)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [September 27, 2019, 10:01am UTC](https://community.letsencrypt.org/t/installing-certificates-for-lets-encrypt-using-acme-on-azure/100828/7 "2019-09-27T10:01:48Z")

</div>

Closed on September 27, 2019, 10:01am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
