# Rolodex DNS — Certificate Enrollment

Get a TLS certificate for a name in one of your zones. Certificates are issued by the Rolodex per-zone CA and automatically published as DANE records. No command line needed.

1. Trust the Rolodex root CA

Install this once on your machines so issued certificates are trusted.

2. Enroll Zone
ACME directory URL

EAB key id

EAB HMAC key

Ready-to-run client commands

Provision the dns-01 record with the bundled hook, e.g. `rolodex-dns-cli add-record`, when your client asks for the challenge.

3. Issued certificates

    (none loaded)