After adding the script and creating the certificate management profile, the profile can be used to easily obtain and install CA-signed certificates.

Procedure

  1. Navigate to Templates > Security > SSL/TLS Certificates. Select Application Certificate option from the CREATE dropdown menu.
  2. Specify the certificate name and select the type as CSR in the Type field.
  3. Select the profile configured in the previous section from the Certificate Management Profile dropdown menu.
  4. Specify the certificate details and click Save

    The Avi Load Balancer Controller generates a key pair and CSR, executes the script to request the CA-signed certificate from the Avi Load Balancer PKI service, and saves the signed certificate in persistent storage.