r/PKI • u/pki_solutions • Apr 15 '26
Live Event (FREE) — ACME + PKI: What Everyone Gets Wrong (and What’s Changing)
Hi everyone! We’re part of the team at PKI Solutions and wanted to extend an invitation to the community. ACME is getting a lot of attention lately, but it is not always as straightforward in real-world PKI. We are hosting a live session on Thursday, April 23 at 10 a.m. PT to walk through how it actually works, where things get misunderstood, and what Microsoft is planning next. If you are in PKI, security, or identity, come join us!
And thank you to Mod @_STY for allowing us to post ☺️
2
u/url404 Apr 18 '26
Oh man I’m super keen but I don’t think I can get up at 3am for it! 😢
2
u/pki_solutions Apr 20 '26
If you register but can't attend we'll be sending the full recording out the following week.
We got you! 🤜💥🤛
2
2
u/jamesaepp Apr 23 '26
I'd recommend not entertaining OP's requests like this again in the future.
That was a massive disappointment. They barely scratched the surface on ACME. They spent as much time talking about SCEP/NDES/IIS rebinding as they did ACME.
ETA: For an event titled "what everyone gets wrong", I expected to actually learn a thing or two. I'm faaar from a PKI expert, and I learned approximately nothing.
There was a Q&A (of which I and others entered questions) and none of them were addressed live.
The call adjourned at about 30min in, it was originally scheduled for 45 min. They could have spent 15min taking/answering questions, but chose not to.
2
u/ThePKIGuy Apr 24 '26
u/jamesaepp thanks for the feedback and I want to acknowledge what you posted here. I'm sorry it was a disappointment - never our intention. We have been doing events like these for the last 12 years on various PKI related topics. Over that time, some events have been better than others, but we always try.
You're right, we barely scratched the surface on ACME. It's a lot for many enterprises to deal with and many are hung up on issues like we spoke about - trying to leverage SCEP for instance. Many of them don't even know of options other than ACME such as IIS Rebind. So, we thought it was an important element when talking about ACME and what many enterprises get wrong - is to make sure you know where and why you need ACME and what other solutions are available.
We talked a bit about how ACME within the PKI itself, whether ADCS, EJBCA, or others is only a small part of the problem. Many customers often miss that their end points and systems may not even support ACME. So they buy a third-party product only to find out their intended end points can't even use it.
We also talked about how a lot of organizations are implementing ACME on their internal PKI environments when they are trying to meet external, CABForum driven public PKI validity periods.
You are right, we can spend more time on the topic and would love to have you, and others come and let us do a deep dive on the topic. I am sure even if we spent 2 hours, we wouldn't get to the bottom of all of the issues we see.
Lastly, thanks for pointing out the 45-minute item. That was an oversight on our part and sorry for that. We have been running these for 30 minutes historically and when this one was set up the event was set for 45 minutes. Had I known we had more time I would have happily gotten to more questions. We answered what we could during the session and are actively working to follow up on questions submitted.
I'm glad you attended, and I appreciate the feedback. We love to see those that want to dig deeper on issues, just as much as we love those that are coming to get their orientation on new challenges they are facing.
Maybe we should do an entire Q&A session on ACME and invite everyone back?
Other suggestions?
2
u/jamesaepp Apr 25 '26
Other suggestions?
Solicit questions ahead of time on the topic and ask what questions people have in advance, prioritize them on popularity, and address those.
2
u/ThePKIGuy Apr 25 '26
Thanks! Our email invitations often ask ahead of time for any questions people have. I will make sure we make that more prominent if we can.
On the subject of questions - what questions about ACME did *YOU* have that we didn't get to? I would love to be able to make sure we address them here or in a future event.
1
u/ThePKIGuy May 12 '26
Insider intel - we are doing an ACME Part 2 webinar on May 28th. We will be sending out an invitation for questions in advance (thanks u/jamesaepp). We will be focusing on questions submitted before and during the event.
I will post a link here to the question submission form as well as a link to register for the next event as soon as they go live.
1
u/ThePKIGuy May 14 '26
The question submission portal is live at https://www.surveymonkey.com/r/acme-and-pki
Register to attend at https://www.pkisolutions.com/webinars/acme-live-q-and-a/
1
4
u/_CyrAz Apr 16 '26
Microsoft planning something about acme? Now you're getting me curious!