Specifying the identity certificates used for generating CSRs

Last Updated : Jul 11, 2022 |
Prolog information
Metadata
Keywords:
You can generate the Certificate Signing Request (CSR) using:
  • Default set of identity certificates for externally facing interfaces.
  • Specific identity certificates for external and internal interfaces.
    If you are using specific identity certificates for external and internal interfaces, then perform this procedure before generating CSRs.
    Note:
    Do not use this procedure if you are using default set of identity certificates for externally facing interfaces.
Tip:
Contact Avaya support personnel for assistance if you want to override a certificate's keySize or subjectAltName values.
  1. Create a file called csr-serviceId-list-file. Copy the service IDs listed below into this file and save it.
    ADDITIONAL INFORMATION: 
    ccm-identity.pfx-ccm-identity.pfx
    rbac-service-certificate-default-rbac-service-idcert
    async-file-transfer-filetransferkeystore
    prometheus-node-exporter-certificate-default-common-services-prometheus-node-exporter-idcert
    fluentd-certificate-default-fluentd-idcert
    platform-kubernetes--service-account.pem-platform-kubernetes--service-account.pem
    egressgateway-certificate-default-egressgateway-idcert
    prometheus-operator-certificate-default-common-services-prometheus-operator-idcert
    eventing-kafka-cp-kafka-connect-kafkaconnectidcert
    kibana-certificate-default-kibana-logging-service-mtls-idcert
    orca-database-rest-databaserestkeystore
    alarming-service-certificate-default-alarming-service-mtls-idcert
    mstrsrv-service-certificate-mstrsrv-idcert1
    egressgateway-mesh-default-egress-mesh-idcert
    eventing-kafka-cp-schema-registry-kafkaconnectidcert
    common-services-auth-http-service-certificate-default-common-services-auth-http-idcert
    alarming-service-certificate-alarmingdb-idcert-primary
    common-services-authdb-certificate-authdb-primary-idcert
    orca-jrnl-agent-login-logout-measure-proc-arbackeystore
    eventing-kafka-eventing-operator-eventingoperatoridcert
    eventing-kafka-cp-kafka-kafkaexternalidcert
    kube-state-metrics-certificate-default-common-services-kube-state-metrics-idcert
    orca-itd-agent-measures-proc-arbackeystore
    orca-open-interface-kafka-interface-orca-open-interface-kafka-interface-key-store
    prometheus-alertmanager-certificate-default-common-services-prometheus-alertmanager-idcert
    async-oceana-adapter-asyncoceanakeystore
    ingressgateway-certificate-default-ingressgateway-idcert
    cmonitor-service-certificate-cmonitor-default
    prometheus-certificate-default-common-services-prometheus-idcert
    certmgmt-agent-certificate-document-idcert-cms
    orca-cdr-measure-proc-arbackeystore
    platform-kubernetes--admin.pem-platform-kubernetes--admin.pem
    certmgmt-agent-certificate-document-idcert-db
    orca-itd-agent-by-account-measure-proc-arbackeystore
    grafana-certificate-default-common-services-grafana-idcert
    certmgmt-agent-certificate-document-idcert-cma
    logelasticsearch-certificate-default-logelasticsearch-mtls-idcert
    clusterhc2-certificate-clusterhc-default
    eventing-kafka-topic-operator-kafkaconnectidcert
    eventing-istio-sidecar-eventing-istio-sidecar-idcert
    ingressgateway-mesh-default-ingress-mesh-idcert
    eventing-operator-istio-sidecar-eventing-operator-istio-sidecar-idcert
    orca-itd-agent-by-routing-service-measure-proc-arbackeystore
    orca-ref-input-adaptor-arbackeystore
    eventing-kafka-cp-zookeeper-kafkaconnectidcert
    orca-interval-controller-arbackeystore
    orca-streams-rest-streamsrestkeystore
    common-services-authdb-certificate-authdb-replica-idcert
    orca-breeze-authentication-streamsrestkeystore
    orca-itd-routing-service-group-measure-proc-arbackeystore
    orca-vdn-measure-proc-arbackeystore
    orca-itd-routing-service-measure-proc-arbackeystore
    orca-itd-agent-group-measure-proc-arbackeystore
    orca-trace-measure-proc-arbackeystore
    pgo-license-certificate-idcert1.default.license
    platform-kubernetes--kube-scheduler.pem-platform-kubernetes--kube-scheduler.pem
    logelasticsearch-certificate-admin-default-logelasticsearch-mtls-idcert
    orca-itd-agent-not-ready-reason-code-measure-proc-arbackeystore
    async-aggregator-interface-asyncaggregatorkeystore
    platform-kubernetes--kubernetes.pem-platform-kubernetes--kubernetes.pem
    platform-kubernetes--kube-proxy.pem-platform-kubernetes--kube-proxy.pem
    kibana-certificate-logging-service.default-cli-idcert
    common-services-jwks-store-jwksstoreidcert
    mstrweb-service-certificate-mstrweb-idcert1
    alarming-service-certificate-alarmingdb-idcert-replication
    orca-itd-site-measure-proc-arbackeystore
    eventing-kafka-cp-kafka-kafkaidcert
    orca-admin-data-service-arbackeystore
    platform-kubernetes--kube-controller-manager.pem-platform-kubernetes--kube-controller-manager.pem
    default-mesh-default-mesh-idcert
    pilot-mesh-default-pilot-mesh-idcert
    orca-streams-data-publisher-orcapublisherkeystore
Next steps
Generate CSRs. If you manually specified identity certificates for external and internal interfaces, run the following command:ccm release cert-manager third-party-certs --generate-service-csr --list-file csr-serviceId-list-file --output-dir <output-directory>