Lets Encrypt Terms of Service have expired

Question

We've just received the email below, which is fine, but there is no way to determine which of the 160 odd firewalls we manage this alert refers to. Surely we can at least have the serial number as part of this email generated by the device? 
 
 I can't see where to accept the new ToS - it looks like we need to simply register for an account again as it's dropped our registration. I assume that's all we need to do?? 
 
 We have only set LE up on a couple of devices internally for now for testing purposes, so I can work it out, but when we roll this up to all 160 firewalls it's going to be a nightmare to log in to each and every device manually and re-register an account. Is there a plan to allow this to be done/pushed out centrally from Central via Templates or something so we can automate an acceptance on ALL managed firewalls?

The Terms of Service for Let's Encrypt have changed. Please go to the web admin console to review and accept the new Terms of Service, otherwise you won't be able to create and renew Let's Encrypt certificates. Please do not reply to this email. Thank you.

Ottoman · Answer

The absence of the device name/link is annoying, but adding that in there doesn't address the bigger issue. I'm more concerned about having to manually log in to each device and accept new terms (register for a new account). I did read that in the v21 release notes, however I figured how often are they going to update T&C - most companies rarely. However, we're only 4 months in to v21 and already LE have changed their terms. If this occurs once or twice a year, logging in manually to 160+ firewalls is a massive task. I imagine this will only really affect resellers or MSP's who have a large amount of firewalls they manage, but there needs to be a better way. Accepting the new T&C from Sophos Central Partner and pushing that acceptance to all firewalls would be logical. Hopefully Sophos can come up with a solution rather quickly, because I'm not sure I can roll out widespread use of LE under the current design.

Lets Encrypt Terms of Service have expired

Top Replies