Create Certificate on CipherTrust Manager
This article describes how to create a certificate on the CipherTrust Manager and get it signed by the local CA.
- Log on to the CipherTrust Manager UI an administrator. 
- Click the CA tab on the left. 
- Navigate to the Local Certificate Authorities section and click the name of local CA using which you want to generate and sign the certificate. 
- Click Issue Certificate. On the Issue Certificate screen, enter/select the details as required. - Note - The Common Name parameter is mandatory. 
- Click Issue Certificate. 
- On the Issue Certificate screen, click save private key to download and save the private key with .pem extension. 
- From the Certificate Purpose drop-down, select server. 
- In the Duration in days field, enter the expiry date of the certificate. 
- Click Issue Certificate. - The server certificate is created and gets signed with the local CA. 
- Click the ellipsis icon corresponding to the server certificate and then click the Download button to save the server certificate in .pem format. - This certificate can be used as the server certificate for the pdbctl utility.