Feature request: Let's Encrypt option for Certificates in USG Flex H series

JoostGroot

We can use certifiactes (self-signed and CA-signed) the USG flex H series, but since the expiration periods are shortening, we would like to user a auto-renew certificate. But there is no option in the firewalls.

The vpn 2FA page is still also not working with the installed certificate, so that would be a prefect time to fix both that issue and add the feature for setting up a Let's encrypt or other auto-renew setup.

Firewalls are maintained within Nebula, but we still need to access the local firewall portal at times. It is not realy safe practice to accept invalid certificates, so we realy want to user our own host and domain for access and a valid certificate.

Hope this feature can be build in.

PeterUK

Really I was hoping for push back for the shortening of certificates

I'm hoping that the move to ionos will soon do ACME soon and that Zyxel will add support for this Let's encrypt that I have setup for my DNS-over-HTTPS is setup and uses port 80 to verify.

But I would like ACME by Email where like FLEX renews the challenge is sent by Email then FLEX connects to my Email server by POP port 110 to do challenge and certificates installed

Zyxel_Tina

Hi @JoostGroot,

Good news! The upcoming firmware v1.39 (planned release around July 27) will add support for Let's Encrypt certificates, including automatic renewal. This should resolve the manual certificate management issue you raised for the local device portal.