Automatic renewal of TLS certificates for AEM as a Cloud Service?

[JakobFix]

Hi all,

my first post here. Please let me know if things aren't clear.

I'm responsible for maintaining an AEM as a Cloud Service instance that will serve about 20 sites, each with its own domain name and hence its own certificate(s). I don't want to maintain them manually. 

From what I've seen in this community someone in 2019 asked a similar question but it seemed clearly targeted for on-prem (happy to be wrong though):

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/regarding-renewing-the-ssl...

So my question is whether one can somehow integrate a tool like Certbot (https://certbot.eff.org/) that would automatically renew all certificates (usually on a quarterly basis)? As it was developed for webservers likes Apache's httpd that underlie AEMaaCS it seems like a natural fit.

If not, how do others manage instances with many domain names?

Thank you in advance,

Jakob.

[anupampat · Accepted solution]

Hi @JakobFix ,

We had asked the same question to Adobe but they replied it has to be manually done, probably because they do not want to rely on any third party apps to generate or maintain certificates. So we have been doing it manually for now although not for far less sites. Do update this post incase Certbot works for you. Looking forward to using, if it works.

Regards,

Anupam Patra