Printer's Plan API - SSL Certificate Creation and Renewal using Let's Encrypt Follow

**It is strongly advised to use an IT team/person for this setup.**

Once finished, you must contact Print Reach Support to provide the new domain. This will also need to be updated in Print Reach Central. Support can help with this if you are unfamiliar.

NOTICE: During the setup of Printers Plan API, Port Forwarding would have been configured to move IP traffic destined for Port 80 from the external public IP address of the router to the Internal Private IP Address of the Printer's Plan Server.
When you set up HTTPS/SSL with the Printers Plan API you will need to update to existing port forwarding rule to function with port 443 instead of port 80.

Installing the SSL Certificate:

Obtaining and installing an SSL certificate involves several steps, including generating a Certificate Signing Request (CSR), submitting it to a Certificate Authority (CA), and installing the issued certificate on your web server.

Installing and configuring Let's Encrypt on a Windows server involves using a client that supports Let's Encrypt's ACME protocol. One popular tool for this purpose is Certbot for Windows or Win-ACME. Below are steps to use Win-ACME to install and configure Let's Encrypt on a Windows server running IIS.

This process sets up auto-renewals on its own so nothing else needs to be done.

Link to our helper video: SSL Setup

1. Set up a sub-domain to use, something like printersplan.[your domain].com.
2. Add a binding to your current IIS site. Most will be "Default Web Site".
   1. To add a binding, open IIS.
   2. Select the dropdowns until you reach "Default Web Site".
   3. Select Bindings... on the far right-hand side.
   4. Click Add.
   5. Enter the domain name. (Leave all other settings default.)
   6. Click OK.
   7. Close the bindings window.
   8. Click Start on the right-hand side. (If already Started, click Restart.)
3. Download Win-Acme from the following address: Win-Acme
4. Extract it to a known location on your computer, for instance, C:\Program Files.
5. Run wacs.exe as administrator.
6. Press N to create a new certificate.
7. Press 1 To Select the Default site where PlanWeb is installed.
8. Press A to select all website bindings under the chosen site.
9. Press Y to Confirm the listed bindings selected for an SSL Cert.
10. Continue to select Y for any other prompts.
11. Enter the Email address to be notified of certificate issues.
12. If there are no errors, you are finished with setup and renewal.
13. Send a copy of your new Domain being used to support@printreach.com

You will also want to update this URL for all integrations you may be using. Below is an example with Print Reach Central. If you have a web ordering storefront, such as MyOrderDesk, you will also need to update it there. Things like ShipStation and ShipLeap will also need to be updated as well as PlanProphet.

Updating the Print Reach Central URL can be done in the following steps:

1. Open your PRC instance
2. Go to the Settings in the bottom left corner
3. Under the Merchant section > Merchant Tab scroll down to MIS Integration > API Endpoint
4. Update the URL to replace the IP address with your new URL, additionally, you will add an 's' to 'http' making it 'https' (See example below)