RA-Portal

All registered network contact persons may now use the ACME server available in RA-Portal to request server certificates.
The implementation uses external account bindings.
Your server is the ACME client, RA-Portal is the ACME server.
Harica remains the issuing CA.

Please read the documentation at RA-Portal, there is no staging environment, all certificate requests are sent directly to the CA.
The ACME server can be reached
- from within the RWTH intranet
- and from the ACME client of the webhosting provider ConnectingBytes

Access permission from foreign IPs may be granted upon request.
Please contact ra@rwth-aachen.de with all pertaining information:
- FQDNs
- source IP addresses
- network contact persons
- your reasoning

The servers required to host the RA portal must be restarted as part of an update. During this time, you will not be able to request new certificates or retrieve certificates that have already been requested.

During the specified maintenance window, the IT Center will perform maintenance on the MySQL databases used by the Multi-Factor Authentication (MFA) service. As part of the maintenance, the databases will be unavailable for a total of approximately 15 minutes.

During this time, new logins to services using RWTH Single Sign-On will not be possible. Existing sessions will remain active and will not be affected by the maintenance.