This project was developed because the author refused to let a printer, which was working perfectly, have a self-signed certificate.
Things escalated.
A Home Assistant add-on that deploys your Let's Encrypt certificate to every device on your network — automatically, from one dashboard.
| Device | Auth method |
|---|---|
| TrueNAS CORE / CE / Enterprise | API key |
| pfSense | Username + password |
| HP Switch 1950 Series (Comware 7 only) | SSH + XTD CLI |
| Hubitat C-7 | API key |
| TP-Link Omada OC200 / OC300 | Username + password |
| Brother MFC Printer | Web UI password |
- In Home Assistant, go to Settings → Add-ons → Add-on store
- Click the three-dot menu (⋮) → Repositories
- Add:
https://github.com/tinmansc/CertFleet - Find CertFleet in the store and install it
- Enable Show in sidebar and start the add-on
- Open CertFleet from the sidebar
- Add your devices using the + Add Device button
- Click Verify to test credentials and check cert status
- Click Deploy (or Deploy All) to push the cert
- Enable Auto-deploy on renewal in Settings to have all devices updated automatically when Let's Encrypt renews your cert
The add-on connects to HP 1950 switches via SSH and uses Comware's PKI system to import the cert. The default XTD-mode password is foes-bent-pile-atom-ship. If your switch uses a non-default startup config name, expand Advanced switch settings in the device editor and set it (run display startup on the switch to check).
See certfleet/RELEASE_CHECKLIST.md for the version bump and release process.
Pre-built multi-arch images (amd64 + aarch64) are published to GHCR on every push to main via GitHub Actions.