VE Management SSL
Configure VE Management SSL to receive renewed certificates automatically.
1. Overview
A Proxmox - VE Management SSL node deploys certificates to this configured target.
2. Configuration
Select this platform and deployment position, then supply the following parameters.
| Field | Required | Description |
|---|---|---|
| API URL | Yes | https://proxmox.example.com:8006 |
| PVE Node Name | Yes | |
| API Token ID | Yes | user@realm!tokenname |
| API Token | Yes | |
| Verify TLS Certificate | Yes | Yes (recommended) / No (self-signed server certificate); default: true |
3. Deployment and renewal
- Use the PVE HTTPS API (usually port 8006). Grant Sys.Modify on the node to both the account and its token. The management proxy reloads automatically.
Associate the certificate with the node and enable automatic deployment on renewal. Certificate replacement uses the same configured target on every run.
The endpoint must use HTTPS and be reachable from the CertOne deployment service. TLS certificate verification is enabled by default. Disable verification only when the target has a self-signed certificate and its address is trusted.
The configuration check reads effective Sys.Modify permission on /nodes/<node>. After upload, CertOne re-reads the certificate fingerprint; temporary proxy restart failures are retried for a bounded period.
4. Verification
Automated protocol tests cover request construction, failure handling and credential redaction. This integration has not been tested against a live account or device in this change. A successful configuration check verifies connectivity and read access; the first deployment also verifies write permissions.