Acme: send renewal certs to other servers

[simtwo]

Has anyone experimented with sending the renewed .crt and .key via scp (with pubkey) or other method to devices outside of the pfsense?

I'm wondering if that would be the right way.

[jimp]

No and it wouldn't generally be the best way. Not only does the receiving system need the new certificate, it also has to get it into the right place and restart the appropriate services. If you want to do that centrally, it would require a platform with more orchestration skills, not a firewall (something like salt or puppet).

[simtwo]

Got it, thanks for the reply!