diff --git a/letsencrypt/CHANGELOG.md b/letsencrypt/CHANGELOG.md
index 5a1be9d1dbe..ea494c5fd4f 100644
--- a/letsencrypt/CHANGELOG.md
+++ b/letsencrypt/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 5.2.8
+
+- Add transip global_key parameter to support authentication without IP whitelist requirements
+
 ## 5.2.7
 
 - Add mijn.host DNS support
diff --git a/letsencrypt/DOCS.md b/letsencrypt/DOCS.md
index d10344e3c58..2d914b83588 100644
--- a/letsencrypt/DOCS.md
+++ b/letsencrypt/DOCS.md
@@ -151,6 +151,7 @@ gandi_token: ''
 gandi_sharing_id: ''
 transip_username: ''
 transip_api_key: ''
+transip_global_key: ''
 inwx_username: ''
 inwx_password: ''
 inwx_shared_secret: ''
@@ -678,6 +679,8 @@ Example configuration:
 
 You will need to generate an API key from the TransIP Control Panel at https://www.transip.nl/cp/account/api/.
 
+If you can't use IP whitelisting, set the `transip_global_key` parameter to `'yes'`. See [Certbot TransIP DNS plugin documentation](https://github.com/hsmade/certbot-dns-transip/blob/master/USAGE.rst#ip-whitelistsing) for more details.
+
 The propagation limit will be automatically raised to 240 seconds.
 
 Example configuration:
diff --git a/letsencrypt/config.yaml b/letsencrypt/config.yaml
index 7ca738a1074..c65f30cd26b 100644
--- a/letsencrypt/config.yaml
+++ b/letsencrypt/config.yaml
@@ -1,5 +1,5 @@
 ---
-version: 5.2.7
+version: 5.2.8
 slug: letsencrypt
 name: Let's Encrypt
 description: Manage certificate from Let's Encrypt
diff --git a/letsencrypt/rootfs/etc/cont-init.d/file-structure.sh b/letsencrypt/rootfs/etc/cont-init.d/file-structure.sh
index 6382d6cc8ff..3fc49c04427 100755
--- a/letsencrypt/rootfs/etc/cont-init.d/file-structure.sh
+++ b/letsencrypt/rootfs/etc/cont-init.d/file-structure.sh
@@ -64,6 +64,7 @@ echo -e "dns_desec_token = $(bashio::config 'dns.desec_token')\n" \
       "dns_sakuracloud_api_token = $(bashio::config 'dns.sakuracloud_api_token')\n" \
       "dns_sakuracloud_api_secret = $(bashio::config 'dns.sakuracloud_api_secret')\n" \
       "dns_transip_username = $(bashio::config 'dns.transip_username')\n" \
+      "dns_transip_global_key = $(bashio::config 'dns.transip_global_key')\n" \
       "dns_transip_key_file = /data/transip-rsa.key\n" \
       "dns_inwx_url = https://api.domrobot.com/xmlrpc/\n" \
       "dns_inwx_username = $(bashio::config 'dns.inwx_username')\n" \