External Account Bindings

External Account Bindings allow binding a certificate to an identifier from an external data source.

The System Configuration External Account Bindings tab lists available Account Binding IDs and allows you to import an External Account Bindings configuration.

images/inline/f76e0bdd5a9f1e9c661964b350f89617f54d935a9a0c4c28846a5bb4420dbf83.png

The list of usable namespaces is available for selection in the Certificate Profile field Account Binding Namespace.

images/download/attachments/134447503/Screenshot_2021-05-31_at_10.45.07.png

To import an Account Bindings configuration, click Browse to upload a CSV file. Use a CSV file format with the two columns namespace and accountId according to the following example.

Allowed values are alphanumeric strings including hyphen (-), underscore (_), and period (.).

Example

namespace1,accountId1
namespace2,accountId2
namespace1,accountId4

The account ID is selectable in the RA UI field External account ID during enrollment, see Creating Certificates on the RA.

Certificates associated with the External account ID can be searched and retrieved using the RA UI, see Certificate and End Entity Life Cycle Management.

For information on how to combine external account bindings with an ACME external account binding (EAB), see Combine ACME EAB with General Account Binding.