Creating A Client Certificate - Avaya Aura Deployment Manual

Creating a client certificate

About this task
Use this procedure to create a client certificate, which can be imported into a web browser for
authenticating automatic login into the Avaya Aura
Procedure
1. Open the Linux shell using your Linux administrator account credentials.
2. Run the following command to create the oamp.csr and oamp.key files:
sudo /opt/Avaya/CallSignallingAgent/<version>/CAS/<version>/misc/createCSR.sh
3. To generate the .pem file, on the System Manager web console, navigate to Security >
Certificates > Authority.
4. Click the Add End Entity tab and complete the following settings:
a. Set End Entity Profile to Empty.
b. Type your user name and password in Username and Password.
c. Type your user ID in CN, Common name.
The user ID you provide must use the same format that you used for the UID
Attribute ID field on the LDAP Configuration tab.
d. Set Certificate Profile to ENDUSER.
e. Click Add.
A new end entity with the specified user name is created on the System Manager web
console.
5. In the left navigation pane, click the Public Web tab and complete the following settings:
a. In Username and Enrollment code , type the same user name and password that
you used to create an end entity.
b. Click Choose File to add the oamp.csr file, which you generated in step
page 155.
c. Click OK to generate the .pem file .
6. In the SSH console, run the openssl command to convert the .pem file to a .pfx/.p12
file.
The following is an example of the command:
sudo openssl pkcs12 -export -out <.p12 file name>-in <.pem file name>.pem -inkey
oamp.key -passout pass:<password>
October 2018
®
Web Gateway web administration portal.
Deploying the Avaya Aura
Comments on this document? infodev@avaya.com
Creating a client certificate
®
Web Gateway
2 on
155