Account Management

Update Your Contact Email 

You can update the email address associated with your ACME account on the GlobalSign ACME server. Keeping your contact information current ensures that your ACME client receives important notifications about account-related issues. Updating your email does not affect any other aspects of your account or existing certificates. 

Account Key Rollover 

GlobalSign supports the Account Key Rollover endpoint as specified in the ACME RFC. This mechanism allows you to update the public key linked to your ACME account to recover from a key compromise or proactively reduce the risk of an undetected compromise. 

No other changes are made to your account during this process. You will not need to repeat External Account Binding (EAB) or other authentication steps. Pending certificate orders and authorizations remain unaffected. This approach is often preferable to deactivating your account. 

NOTE: Not all ACME clients support key rollover (e.g., Certbot). Check your client’s documentation to confirm compatibility. 

Deactivate Your Account 

You can deactivate your ACME account at any time. Common reasons include a compromised account key or retiring a key that is no longer in use. 

Once deactivated: 

• The account can no longer request certificates or access related resources (e.g., orders, authorizations). 

• Any pending operations authorized by the account key will be canceled (such as certificate orders). 

• Existing certificates issued by the account will not be revoked. 

IMPORTANT: Deactivation is permanent. You cannot reactivate a deactivated account. To continue using ACME, you must create a new account and complete External Account Binding (EAB) again.