Skip to content
Tatsuro Shibamura edited this page Mar 14, 2026 · 1 revision

FAQ

How does automatic renewal work?

Acmebot automatically renews existing ACME certificates 30 days before expiration by default. The renewal check runs at 00:00 UTC.

If you need the timer to run in a different time zone, configure WEBSITE_TIME_ZONE on the Function App:

Note

WEBSITE_TIME_ZONE is not supported on Linux Flex Consumption or Linux Consumption plans. In those environments, keep the schedule in UTC.

How much does Acmebot cost to run in Azure?

Typical monthly platform costs are approximately:

  • Azure Functions: <$0.01
  • Storage Account: $0.10-$0.20
  • Application Insights: $0.01-$0.02

Certificate charges from Azure Key Vault are billed separately. Actual cost depends on certificate volume, renewal activity, notification usage, and how often the dashboard or API is used.

Can I use an existing Key Vault?

Yes. Deploy Acmebot against the existing vault and grant the application permission to read and manage certificates in that vault.

How do I remove a certificate?

Delete the certificate from Azure Key Vault if you want Acmebot to stop managing it. If you also need the certificate to be revoked at the certificate authority, use the dashboard or REST API revocation flow before deleting it.

How do I reinstall or upgrade Acmebot without losing certificates?

Keep the Key Vault and its certificates in place during reinstall or upgrade. Acmebot will continue using the existing vault and certificates after deployment.

How do I troubleshoot failed issuance or renewal?

Start by checking the operation status, then inspect the Function App monitor, log stream, or Application Insights to determine whether the failure is related to DNS, Key Vault permissions, authentication, or the consuming Azure service.

How do I add or remove SANs from an existing certificate?

Acmebot uses the Key Vault certificate policy as configured. To change SAN entries, update the certificate policy in Azure Key Vault.

If you need the change to take effect immediately, renew or reissue the certificate after updating the policy.

Clone this wiki locally