Generating a CSR

Perform this procedure while logged in to the deployer VM.

Use this procedure to generate a CSR for the northbound interface certificate. The Fabric Services System generates a private key and creates a CSR which the user sends to a CA for signing. After the CSR is signed, the customer provides the certificate and chain back to the system, which has stored the private key.

Use the following command:

fss-certificate.sh generate-csr --country <country> --province <province> --location <location> --org <organization> --org-unit <organizational unit> --days <num of days> --input-file <path>

where:

--country <country> is the two-letter of the country for the certificate subject

--province <province> is the province or state (in full) for the certificate subject

--location <location> is the location name (typically city) for the certificate subject

--org <organization> is the organization or company name for the certificate subject

--org-unit <organizational unit> is the organizational unit or team for the certificate subject

--days <num of days> is the number of days the certificate is valid

--input-file <path> is the name of the input JSON configuration file

Generate a CSR for a user.

fss-certificate.sh generate-csr --country US --province CA --location Sunnyvale --org Nokia --org-unit ION --days 3650 --input-file input.json