Start/notes.ini Parameters/CertMgr_ACCEPT_TOU

CertMgr_ACCEPT_TOU

Parameter: CertMgr_ACCEPT_TOU
Short description: Accepts the Let's Encrypt license terms (ACME Terms of Use). Required for automatic certificate requests — without this parameter, automatic requests fail because ACME account documents ship with the License Agree setting disabled.

Profile

Parameter
CertMgr_ACCEPT_TOU
Category
Security / TLS (Certificate Manager / Let's Encrypt)
Available since
At least 12.0 (HCL documentation)
GUI equivalent
notes.ini only — command-line equivalent: -ACCEPT_TOU for the load certmgr command
Possible values
0 (not accepted) or 1 (accepted)
Default
0 (not accepted)

Description

According to the HCL product documentation:
Default: 0 — Value: 1 — Command-line equivalent: -ACCEPT_TOU — Description: Accepts Let's Encrypt License Terms. Required for automatic requests. If you don't specify this parameter, automatic requests fail because ACME account documents ship with the License Agree setting disabled.
With CertMgr_ACCEPT_TOU=1, the Let's Encrypt license terms (ACME Terms of Use) are accepted automatically. The parameter is mandatory for automatic certificate requests — without it, auto-requests fail because the shipped ACME account documents have the License Agree field disabled by default.
For One-Touch setups and Quick Start workflows this parameter is required. On the CLI, HCL bundles the typical auto-setup combination under the umbrella parameter -ACCEPT_TOU_AUTO_CONFIG — this is equivalent to -r -c -o -y -ACCEPT_TOU.

Example configuration

CertMgr_ACCEPT_TOU=1
Quick Start on the console (covers multiple auto-config steps in one call):
load certmgr -ACCEPT_TOU_AUTO_CONFIG

Notes & pitfalls

  • CertMgr exists since HCL Domino 12 — on older versions (≤ 11.x) the parameter has no effect.
  • Setting it is a legally binding acceptance of the Let's Encrypt ToU. Should only be done after the legal review in the organization is complete.
  • Without CertMgr_ACCEPT_TOU=1 (or CLI -ACCEPT_TOU), all automatic ACME requests fail — manual requests are still possible if the License Agree field is enabled in the ACME account document.
  • Command line (-ACCEPT_TOU) overrides the notes.ini value.
  • Useful combination with CertMgr_AutoRequestCert=1 and CertMgr_AutoConfigHttp=1 for fully automated Let's Encrypt setups.

Sources (HCL Product Documentation)