Bundling the identity certificate and private key into a PKCS #12 container

Last Updated : May 26, 2021 |
Prolog information
Metadata
Keywords:
This section describes the procedure to bundle the signed identity certificate and its corresponding private key into a PKCS#12 container using OpenSSL. PKCS#12 is the format required by System Manager to install the identity certificate onto Avaya Breeze® platform.
This procedure is a continuation of the previous procedure about generating a CSR and private key. It assumes the identity certificate file is asm1_signed.pem and the private key is asm1.key.
Before you begin
  • Obtain an identity certificate from the PKI administrator.
  • The identity certificate must be in PEM format. If it is in a different format, you can use OpenSSL to change it to PEM.
  1. Copy the asm1_signed.pem to Avaya Breeze® platform and place it in /home/cust/.
  2. Log into Avaya Breeze® platform using an SSH connection.
  3. Run the following OpenSSL command to generate the PKCS#12 file. It would prompt for:
    ADDITIONAL INFORMATION: $ openssl pkcs12 -export -out asm1.p12 -inkey asm1.key -in asm1_signed.pem
    Enter pass phrase for asm1.key:
    Enter Export Password:
    Verifying - Enter Export Password:
    You are prompted for the private key passphrase and a new password to to protect the PKCS#12 file. This password is required when installing the identity certificate through System Manager.
    The generated PKCS#12 container file is asm1.p12.
  4. Download the generated PKCS#12 container file and install it on Avaya Breeze® platform.
    ADDITIONAL INFORMATION:
    For more information, see Replacing an identify certificate with a third party CA certificate.
  5. Delete the private key asm1.key from the Avaya Breeze® platform server to avoid it get compromised.
    ADDITIONAL INFORMATION:
    The following is the path to the private key: $ rm /home/cust/asm1.key
Related links
CSR generation