Creating a client certificate
About this task
Use this procedure to create a client certificate, which can be imported into a web browser for
authenticating automatic login into the Avaya Aura
®
Web Gateway web administration portal.
Procedure
1. Open the Linux shell using your Linux administrator account credentials.
2. Run the following command to create the
oamp.csr
and
oamp.key
files:
sudo /opt/Avaya/CallSignallingAgent/<version>/CAS/<version>/misc/createCSR.sh
3. To generate the
.pem
file, on the System Manager web console, navigate to
Security
>
Certificates
>
Authority
.
4. Click the
Add End Entity
tab and complete the following settings:
a. Set
End Entity Profile
to
Empty
.
b. Type your user name and password in
Username
and
Password
.
c. Type your user ID in
CN, Common name
.
The user ID you provide must use the same format that you used for the
UID
Attribute ID
field on the LDAP Configuration tab.
d. Set
Certificate Profile
to
ENDUSER
.
e. Click
Add
.
A new end entity with the specified user name is created on the System Manager web
console.
5. In the left navigation pane, click the
Public Web
tab and complete the following settings:
a. In
Username
and
Enrollment code
, type the same user name and password that
you used to create an end entity.
b. Click
Choose File
to add the
oamp.csr
file, which you generated in step
page 155.
c. Click
OK
to generate the
.pem
file .
6. In the SSH console, run the
openssl
command to convert the
.pem
file to a
.pfx/.p12
file.
The following is an example of the command:
sudo openssl pkcs12 -export -out <.p12 file name>-in <.pem file name>.pem -inkey
oamp.key -passout pass:<password>
Creating a client certificate
October 2018
Deploying the Avaya Aura
®
Web Gateway
155
