Client Automation Security Features › Authentication › Generation of Application-specific Certificates

Generation of Application-specific Certificates

For each application listed in “Current Certificates”, create a new certificate. If you do not use the DN as listed in the appendix table, then you will also need to assign the required permissions for the certificate security profile in the Client Automation security browser.

To ensure that the newly created certificate is visible to the Client Automation security browser, the DER encoded certificate should be imported into the Client Automation certificate database on the manager nodes.

The command to create the new certificates is as follows:

cacertutil create -o:certname.p12 -od:certname.der -op:passphrase “-s:CertDN” -i:rootname.p12 -ip:rootpassphrase -d:730

-o

Specifies the output file name for the PKCS#12 packaged certificate.

-od

Specifies the output file name for the DER encoded certificate.

-op

Specifies the pass-phrase to protect the PKCS#12 output certificate.

-s

Specifies the DN to whom the certificate should be issued.

-i

Specifies the file name of the root PKCS#12 certificate.

-ip

Specifies the pass-phrase protecting the root PKCS#12 certificate.

-d

Specifies the lifetime of the certificate in days (the example shows 2 years (= 730 days)).