Automation

The Horizon Client can help you automate the installation of your TLS certificates. Helper commands are available for Microsoft IIS, Apache and Nginx. Note that the two latter commands only work on Linux.

Microsoft IIS

The automate command for Microsoft IIS will enroll or renew a certificate, store it in the Windows Machine Store using the software backend, and bind it to the specified host and port.

horizon-cli automate iis --enroll=<challenge> --profile=myestprofile --dnsnames=www.example.com --bind-host www.example.com:443

Apache

The automate command for Apache works exactly the same as the est client, except that it will restart your Apache server after the certificate has been installed.

To restart your server, the client will try to use the service command to restart the service named httpd if the client is run on a RHEL machine or apache2 if any other distibution is used.

 
horizon-cli automate apache --enroll=<challenge> --profile=myestprofile --dnsnames=www.example.com --cert /etc/ssl/certs/apache.pem --key /etc/ssl/private/apache.key

Nginx

The automate command for Nginx works exactly the same as the est client, except that it will restart your Nginx server after the certificate has been installed.

To restart your server, the client will try to use the service command to restart the service named nginx.

 
horizon-cli automate nginx --enroll=<challenge> --profile=myestprofile --dnsnames=www.example.com --cert /etc/ssl/certs/nginx.pem --key /etc/ssl/private/nginx.key