# Renew when create manually **URL:** \ **Category:** Help\ **Created:** [October 17, 2021, 3:54pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351 "2021-10-17T15:54:37Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Uhrgrossvater](https://avatars.discourse-cdn.com/v4/letter/u/94ad74/32.png) [@Uhrgrossvater](https://community.letsencrypt.org/u/Uhrgrossvater)\ **Post date:** [October 17, 2021, 3:54pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351/1 "2021-10-17T15:54:37Z")
Hello, I couple of weeks ago I created a new server. I added a certificate by using the following command: ```nohighlight certbot --manual --preferred-challenges dns certonly -d ``` After I added the \_acme-challenge DNS TXT entry I was able to receive the certificate. Unfortunately I when I added a cron job for renew the certificate I receive the follwing error message: ```nohighlight # /usr/bin/certbot renew Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Processing /etc/letsencrypt/renewal/.conf - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Cert is due for renewal, auto-renewing... Could not choose appropriate plugin: The manual plugin is not working; there may be problems with your existing configuration. The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.') Attempting to renew cert () from /etc/letsencrypt/renewal/.conf produced an unexpected error: The manual plugin is not working; there may be problems with your existing configuration. The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.'). Skipping. All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live//fullchain.pem (failure) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live//fullchain.pem (failure) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1 renew failure(s), 0 parse failure(s) ``` I already read through multiple articles and I understand that the issue is because of the fact that I created the certificate manually but I want to automatic renew the certificate. Unfortunately I didn't find the right article that describes the best way to autorenew the certificate using the \_acme-challenge DNS TXT method without the need to manually create the DNS entry manually for every renew. Does anyone know the best way or does anyone know a googl documentation how to do it. BR ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [October 17, 2021, 4:14pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351/2 "2021-10-17T16:14:42Z")
> [@Uhrgrossvater](#): > > Unfortunately I didn't find the right article that describes the best way to autorenew the certificate using the \_acme-challenge DNS TXT method without the need to manually create the DNS entry manually for every renew. Does anyone know the best way or does anyone know a googl documentation how to do it. To automate the renewal while using the `dns-01` challenge, you should also automate the adding (and removing) of the TXT record through DNS. So it really depends on _how_ you could be able to do that. Certbot has a few DNS plugins for that ([User Guide — Certbot 2.7.0.dev0 documentation](https://certbot.eff.org/docs/using.html#dns-plugins)) and there are also some third party DNS plugins available out there ([User Guide — Certbot 2.7.0.dev0 documentation](https://certbot.eff.org/docs/using.html#third-party-plugins)). If there isn't a certbot plugin available for your DNS provider, you might have more luck using one of the _many_ DNS plugins of the ACME client `acme.sh` ([https://github.com/acmesh-official/acme.sh/tree/master/dnsapi](https://github.com/acmesh-official/acme.sh/tree/master/dnsapi)). You could use `acme.sh` directly, although it wouldn't be so hard to modify such a script for usage with certbot. If your DNS provider isn't available in the options I've mentioned above but _does_ provide an API, you could write your own scripts for adding and removing the TXT record(s). That script would be used with the `--manual-auth-hook` and `--manual-cleanup-hook`, respectively ([User Guide — Certbot 2.7.0.dev0 documentation](https://certbot.eff.org/docs/using.html#pre-and-post-validation-hooks)). (Those options would also be used if you'd modify an `acme.sh` DNS plugin script mentioned earlier by the way.) Also, do you actually _require_ the use of the `dns-01` challenge? I.e., are you using a wildcard certificate? Or is port 80 blocked? ---
**Author:** ![Uhrgrossvater](https://avatars.discourse-cdn.com/v4/letter/u/94ad74/32.png) [@Uhrgrossvater](https://community.letsencrypt.org/u/Uhrgrossvater)\ **Post date:** [October 17, 2021, 5:14pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351/3 "2021-10-17T17:14:21Z")
Hello, I didn't understand everything you write because my experience with certbot is really limited but the answer for the questions are: - I use domaindiscount24 as provider. - I don't need to fetch a wildcard certificate and I would like to avoid using port 80 method because the webserver is allready using the port. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [October 17, 2021, 5:24pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351/4 "2021-10-17T17:24:13Z")
> [@Uhrgrossvater](#): > > I use domaindiscount24 as provider. Do they provide an API to automate adding and removing things? > [@Uhrgrossvater](#): > > I don't need to fetch a wildcard certificate Then you probably don't need the dns-01 challenge! > [@Uhrgrossvater](#): > > I would like to avoid using port 80 method because the webserver is allready using the port That's OK, certbot can most likely work _with_ that webserver. But to determine that, we'll need some more info. Can you please answer the questionnaire which should have been provided to you when you first opened this thread in the #Help section? * * * Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don't know): I'm using a control panel to manage my site (no, or provide the name and version of the control panel): The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 16, 2021, 5:25pm UTC](https://community.letsencrypt.org/t/renew-when-create-manually/163351/5 "2021-11-16T17:25:08Z")
Closed on November 16, 2021, 5:25pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.