Someone already implemented the automated certificate renewal by using the ACME protocol and can share the experience? Is it planned that this feature will also be available on an on-premises NetScaler console or only for NetScaler Console service?

It's available via ADM but didn't try it yet.

what version of ADM are you using, on my 14.1.56.71 it is not yet available

Have yet to use it but it's available at least on our 60.57 and I'm sure, below. There's some posts on the forum about it since the start of the year, so.. it should be available for you?

i have only zero-touch certificate not the ACME protocol

Zero touch uses ACME, check their doc

I have implemented the NetScaler Console Service Zero Touch. The screens are a little confusing as you have to add the provider first. Currently, there is support for Digicert, Venafi, and Let's Encrypt. I believe Sectigo is in the works.

And it’s depending on your dns provider where your public domains are hosted, correct @Richard Faulkner ? For example azure dns is working fine

Curious on this as well now that cert will eventually be so short lived. Those that have this running how do you deal with the other components - storefront, FAS, etc

Other components are usually using internal PKI so you are still in control of the cert validity and you can autorenew when using ADCS

There are two methods that can be implemented to authenticate ownership of the domain in order to allow the issuance of the certificate. One of them is DNS and I believe they will still allow the entry of a header on the web site as well.