Windows AD CS + ACME

[tdmarchetta]

Windows AD CS + ACME

[webprofusion-chrisc]

I haven't used Windows AD CS much myself but there are a couple of projects that try to provide an ACME service that you could then use:

https://github.com/glatzert/ACME-Server-ADCS (powershell)

https://github.com/grindsa/acme2certifier

From memory there were more but I can't find them on google currently. The big commercial enterprise PKI vendors offer this sort of integration as well I believe.

Other variations on the theme include sharing your root certificate from AD CS with a different internal ACME server (so the trust stays the same but the issuing system is different): https://smallstep.com/blog/byor-adcs-to-smallstep/

Can you describe your use case in more detail? Machine identity, trusted intranet sites and client certificates??

We wouldn't rule out directly providing such integration but it's not in the pipeline currently.