1/3
ACME Client - is it present VDC and SCP?

Simone Eusebi Lv1  Posted 2026-Oct-19 18:00

Hi everyone,

With SSL certificates moving toward shorter validity periods, I was wondering if VDC and SCP supports integration with an ACME client to fully automate certificate renewal and deployment.

Thanks in advance,

Simone

By solving this question, you may help 327 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

dhileepan Lv1  Posted 2026-Oct-20 20:55
  
Last edited by dhileepan 2026-Oct-20 20:58.

In Short, you can using the Sangfor OPen APIs. But I would check with the support Team regarding the feasibility regardless.
George Fady Lv2  Posted 2026-Oct-21 20:12
  
ACME protocol integration and automated SSL/TLS certificate renewal are not supported on either Sangfor VDC or Sangfor SCP based on the available documentation; the only documented certificate-import method for SCP is manual upload through the console. Because the exact feature status is not resolved by an official statement, confirm the current roadmap with Sangfor Technical Support before relying on any automation.

Details
Sangfor SCP

The documented certificate workflow is manual only: log in to the SCP platform, go to [System] > [Certificate Settings], import a certificate file (pfx, p12, crt+key, or pem), optionally enable Ignore validity period for certificates valid longer than 365 days, and click [Save]. No ACME protocol, ACME client integration (Certbot, acme.sh, or similar), or automated renewal/redeployment mechanism is described.
Related platform automation content covers infrastructure management and API/CLI integration for monitoring — not certificate lifecycle automation.
Sangfor VDC

VDC certificate handling is not documented as an automated or ACME-based process. The VDC material in evidence covers administration, licensing via SCP, user management, and thin-client 802.1x certificate import (manual, via FAT32 USB drive, *.der and *.pem only), which is unrelated to SSL/TLS server certificate renewal.
Direct answers to the checklist

ACME protocol integration: no documented support on either VDC or SCP.
ACME client integration (Certbot, acme.sh, etc.): no documented support on either product.
Automation level: certificate deployment on SCP is documented as manual import only; no native or partial automation for renewal/deployment is documented.
VDC vs SCP: neither product documents ACME automation; the difference is only in the documented manual certificate path ([System] > [Certificate Settings] on SCP).
Evidence: available official material does not confirm ACME support; treat the status as unverified and confirm with Sangfor Technical Support.
Alternatives: the only evidence-backed approach is issuing/renewing certificates with an external tool and manually importing the result into SCP. API-based certificate deployment and supported scripts are not documented and should not be assumed.
Supported vs workaround: manual import on SCP is officially documented; any external ACME client combined with manual import is a customer-side process, not an officially supported Sangfor feature.
⚠️ Notes / Risks
Do not assume ACME support exists merely because the products accept SSL certificates — documentation only confirms manual certificate import on SCP.
Any unsupported automation script or API call risks breaking the console certificate configuration; validate against official guidance first.
Recommended Next Steps
Open a case with Sangfor Technical Support to confirm whether ACME integration is planned or available in your exact SCP and VDC versions.
If automation is required now, issue and renew certificates with your own ACME client externally, then import the renewed certificate manually into SCP via [System] > [Certificate Settings].
Review the SCP User Manual for the certificate configuration section and the version compatibility matrix before changing anything.

I Can Help:

Change

Board Leaders

George ...

Weekly Sharers