Generating a CSR when third-party signed certificate is unavailable

Last Updated : Jan 24, 2023 |
If you do not have a third-party signed certificate, then you can have the CSR certificate signed from the System Manager.
In case of direct SIP trunks, if you are making a direct trunk between 2 Communication Managers having different System Managers, then the System Manager pem files should be exchanged in order to have the link working. For example, if you have a Communication Manager 7.0 and Communication Manager 7.1 with SIP direct link, then you need to have System Manager 7.0 pem file on Communication Manager 7.1, and Communication Manager 7.1 pem file on System Manager 7.0.
Note:
If you are using a duplex server, you must first install the certificate on a standby server. Later, you must interchange the server and apply the certificate on the new standby server. You must install the certificate on Enterprise Survivable Server (ESS) and Local Survivable Processor (LSP) separately.
Prolog information
Metadata
Keywords:
  1. On the Communication Manager SMI, click Administration Server (Maintenance).
  2. In the Security section, click Certificate Signing Request.
  3. Enter the appropriate details in the fields.
    ADDITIONAL INFORMATION:
    For more information, see the Certificate Signing Request field descriptions section.
  4. Click Generate Request.
  5. Copy the content between BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST, and click Continue.
  6. Log on to System Manager web interface, and navigate to Security Certificates Authority.
  7. Click RA Functions Add End Entity, and enter the required details.
    ADDITIONAL INFORMATION:
    For more information, see the Creating an end entity section in Administering Avaya Aura® System Manager.
  8. In the left navigation pane, click Public Web.
  9. In the new window, click Create Certificate from CSR.
  10. In the Certificate enrollment from a CSR page, enter the user name and password that you created in Step 7.
  11. Paste the CSR content that you copied in Step 5.
  12. To generate and download the certificate on to your local machine, click OK.
  13. Go to Communication Manager SMI, and download the certificate from your local machine.
  14. In the Security section, click Server/Application Certificates.
  15. Click Add, and copy the certificate which was downloaded.
  16. Click Open, and check Communication Manager.
  17. Click Add.
Related links
Certificate Management