Generating Certificate Signing Requests

Last Updated : Jun 10, 2026 |

About this task

Use this procedure to generate a Certificate Signing Request (CSR).

Important:

You must use this procedure if you are not using System Manager as the only Certificate Authority (CA) to sign certificates for all solution components.

Before you begin

Ensure that Avaya Aura® Device Services is successfully installed with System Manager signed certificates. This is the default setting for installation.

Procedure

  1. Run the following command: 
    mkdir /tmp/AADSportalCerts
chmod 770 /tmp/AADSportalCerts

    The system creates an AADSportalCerts directory in /tmp/ for the output of the script that will generate the CSRs.

  2. Run the following command to navigate to the directory containing the script: 
    cdto misc
  3. To generate a CSR, run the following command: 
    sudo ./createCSR.sh /tmp/AADSportalCerts frontEndFQDN localFQDN organizationName organizationUnit locality stateOrProvince countryCode emailAddress
    Important:

    This command is a single Linux command and must be entered as a single line even if it appears as several lines in the document.

    The parameters for this script are:

    • frontendFQDN: For a cluster installation, this is the FQDN of the Virtual IP or external load balancer. For simple, non-clustered installations, this is the FQDN of the server where Avaya Aura® Device Services is installed.

    • localFQDN: The FQDN of the server.

    • orgnizationName: The name of the organization.

    • organizationUnit: The name of the unit or sub-organization. For example, Design.

    • locality: The name of the city or town.

    • state: The two-digit state or province code.

    • countryCode: The two-digit country code.

    • emailAddress: The administrator email address.

  4. Verify that /tmp/AADSportalCerts contains the .key and .csr files for front-end, node, OAMP, and LYNC.