Managing certificates for Web Client software

Last Updated : Jul 06, 2026 |
Prolog information
To encrypt communication between browsers and the Web client CMS server you must install a security certificate. Use the following procedure to obtain a signed security certificate.
  1. Log on as root on the CMS server.
    ADDITIONAL INFORMATION:
    Important:
    • You cannot directly log on as root from a remote connection. You must log on using an administered CMS user ID, then use su - root to log on with root privileges.
  2. To create and move to a temporary work directory, use the following commands:
    ADDITIONAL INFORMATION:
    mkdir /opt/cmsweb/cert/custom
    cd /opt/cmsweb/cert/custom
  3. To generate a private key, use the following command:
    ADDITIONAL INFORMATION:
    keytool -genkey -alias cmsweb1 
    -keyalg RSA -keysize 2048 
    -keystore cmsweb.p12 
    -dname "CN=[fqdn],OU=CMS,O=Avaya,L=Thornton,ST=Colorado,C=US" 
    -ext "SAN=IP:[ip],DNS:[fqdn]"
    • In the -dname part, replace the [fqdn] with the FQDN for CMS.
    • In the -ext part, replace the [fqdn] and [ip] with the values for CMS.
    • The -alias value must be cmsweb1 as shown.
    • The -keystore value must be cmsweb.p12 as show.
    • All other values (-keyalg, -kesize) must be as shown.
  4. Enter the keystore password: cmsweb.
  5. To generate a Certificate Signing Request (CSR), enter:
    ADDITIONAL INFORMATION:
    keytool -certreq -keyalg RSA -alias cmsweb1 -file cmsweb.csr -keystore cmsweb.p12
  6. To obtain a signed certificate, submit the CSR to the Certificate Authority (CA) using your organization's regular certificate signing procedure.
    ADDITIONAL INFORMATION:
    • You can use the Avaya System Manager CA function to sign the certificate.
  7. Obtain a copy of the root certificate of the CA used in the previous step. For example, <CARootCert>.pem.
  8. If the CA also uses intermediate certificates, obtain copies of those certificates.
  9. Copy the signed certificate to /opt/cmsweb/cert/custom directory.
  10. To import the signed certificate, enter:
    ADDITIONAL INFORMATION:
    keytool -import -alias cmsweb1 -keystore cmsweb.p12 -file <SignedCert>.pem
  11. To copy the keystore containing the certificate to the CMS Web location, enter:
    ADDITIONAL INFORMATION:
    cp cmsweb.p12 /opt/cmsweb/cert/cmsweb.p12
  12. To restart the Web client on the CMS server, enter:
    ADDITIONAL INFORMATION:
    cmsweb stop
    cmsweb start
Next steps