Let’s Encrypt

The Let’s Encrypt extension for opsi makes it possible to automatically obtain and renew SSL/TLS certificates for the opsi config server via the Let’s Encrypt certification authority. In this case, the opsi CA is still used to generate certificates for opsi clients and opsi depot servers. However, the server certificate for the opsi config server is obtained from Let’s Encrypt. This has the advantage that all common browsers accept the certificate of the opsi config server without warning.

To configure the use of Let’s Encrypt for opsi, please read Using Let’s Encrypt.