lots of stats, easy maintenance, remote administration and other benefits I have probably yet to discover.

python acme_tiny.py --account-key account.key --csr unifi.scotthelme.co.uk.csr --acme-dir /home/scott/acme/challenges > signed.crt I also wrote a blog about a script I created called Let's Encrypt Smart Renew. You can call this script hourly and it will only renew the certificate if it actually needs renewing. 0 * * * * /path/to/smartRenew.sh # Hourly on the first minute tar -cvf /etc/ssl/private/cert.tar -C /etc/ssl/private cloudkey.crt cloudkey.key unifi.keystore.jksdifferences is that it does not matter which way round the connector is plugged in. The connector shape is a rectangle

Here is the actual script I'm using on my server to renew the certificate and update the Cloud Key with the new files. #!/bin/bash Upon initial run, it takes about 30 seconds to start serving the Unifi Controller services. After a week, it’s been very robust, and takes about 1 GB of RAM. As I mentioned in my previous blog I have a HP ProLiant MicroServer running at home that I use for various tasks. My unifi.scotthelme.co.uk subdomain resolves to the IP of that server which obtains the Let's Encrypt certificate for me as it can answer the challenge. The server then connects to the Cloud Key via SSH using key-based auth and copies the new certificate over and runs the commands to regenerate the JKS file and restart the UniFi service. This way there is zero maintenance for me and I keep the full benefits of Let's Encrypt and no worries. There is possibly a way that you could just run Let's Encrypt on the Cloud Key directly and my blog Getting started with Let's Encrypt would be a good place to start if you're interested. For me though I already have my server running locally so it was the easier approach. You may to see the Your connection is not private again. As this is a very specific case where it is

USB Power Source

setting up the Unifi Cloud Key then you are probably the network administrator and will probably know For information on configuring and using the UniFi Controller software, refer to the User Guide. Specifications Note: You can run the UniFi Network Application or UniFi Protect Application individually, or you can run both applications simultaneously. Switches that are 802.3af/at / PoE compliant can power the cloud key. Simply connect the supplied Ethernet Cable to the Use an 802.3af-compliant switch, such as a UniFi Switch, or a USB power source (not included). UniFi Switch

We now need to create a new version of unifi.keystore.jks which is what the web interface will use, but using our own certificate instead. For the certificate that you got from your CA you will need the intermediate certificate and the root certificate in PEM form. If you have them in DER form then you can use the following command to convert them. openssl x509 -in intermediate.der -inform DER -out intermediate.crt -outform PEM This Gigabit Ethernet port is used to connect the power and should be connected to the LAN and DHCP server. Power can be provided by an 802.3af PoE switch, such as the UniFi PoE Switch. Note: The Cloud Key G2 Plus only supports hard drives that can operate on 5V power. Hard drives that require additional power are not supported. Cloud Key and to a PoE enabled port on the switch. Please note that not all ports on a 802.3af/at / PoE compliant switch Ensure that your power and network connections are secure. If they are, but your issue persists, we recommend using our UniFi cables for optimal compatibility and performance. Verify Your UniFi Console's Internet ConnectionYou may choose to restrict the collection or use of your personal information in the following ways: Some time later it was time to upgrade hardware (mostly due to get 802.11n/5GHz wireless) and I wanted to