Create end entity in System Manager

Last Updated : Aug 08, 2023 |

About this task

Using this procedure to create an end entity in System Manager. The following steps are a worked example of using System Manager as the CA.

Procedure

  1. In System Manager, click SMGR > Services > Security > certificates > Authority > Add End Entity.
  2. On the Add End Entity page, do the following:

    DN field

    Description

    Example or To Do

    End Entity Profile

    The unique end entity profile.

    Click EXTERNAL_CSR_PROFILE

    Username

    Your username.

    Galway

    Password or Enrollment Code

    New REF certificate password.

    Galway

    Confirm Password

    New REF certificate password.

    SANS

    Subject Alternative Name

    Define alternative names or additional host names for a single SSL certificate.

    Separate multiple entries with spaces. If not applicable leave blank.

    ccm130100 10.134.139.100

    Email Address

    Your email address.

    abc@avaya.com

    CN, Common Name

    The FQDN of the CCM server.

    ccm13940

    CN, Common Name

    The server host name or your name.

    ccm13940

    O, Organization

    The exact legal name of your organization.

    AVAYA

    C, Country (ISO 3166)

    IE

    OU, Organizational Unit

    The section of the organization.

    Analytics

    L, Locality

    -

    Galway

    ST. State or Province

    -

    Galway

  3. Leave the other fields blank and click Add.
  4. To create a PEM file using the end entity in System Manager, click SMGR > Services > Security > certificates > Authority > Public > Web > Create Certificate from CSR.
  5. On the Certificate enrollment from a CSR page, do the following:
    • Enter the username.

    • Enter the enrollment code.

    • Choose the .csr file

    • In the Result type field, select PEM - certificate only.

  6. Click OK.
  7. To get the System Manager PEM file, click SMGR > Services > Security > certificates > Authority > Public Web > Fetch CA Certificates > Download as PEM.
  8. Copy both the .pem files on to CCM into the directory that was created in the previous script as a root user. For example, /home/cust/sslRef.

    You can also copy the files to another location and then move the files into the /home/cust/sslRef directory by using the command line.

    Note:

    Ensure to maintain the following order of the certificates in the .pem files:

    1. Signed certificate

    2. Intermediate certificate

    3. Root certificate