---
schema_version: "1"
id: a9d5e6375cbc634f3a4aeab3ab589079557e5f39b09b631937f25bbc03bedb18
title: Generate a Self-Signed Certificate with OpenSSL
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/voice_ac_generate_cert.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.voice_ac_generate_cert.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 408271372ff847a71da536b8538e7ea42fad16602b71235ec6119c094c05ccea
description: Use OpenSSL to generate an RSA private key and two certificates. You need one certificate to set up a secure connection between Amazon Connect and Salesforce and another certificate for the REST API integration. Repeat the steps to create both certificates. After generating the certificates, update your contact center definition file based on the certificate value if you've manually integrated your contact center.
products:
  - Service Cloud
  - Digital Engagement
release: "264"
---
# Generate a Self-Signed Certificate with OpenSSL

Use OpenSSL to generate an RSA private key and two certificates. You need one certificate to set up a secure connection between Amazon Connect and Salesforce and another certificate for the REST API integration. Repeat the steps to create both certificates. After generating the certificates, update your contact center definition file based on the certificate value if you've manually integrated your contact center.

This article applies to:

- Salesforce Voice with Partner Telephony from Amazon Connect

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-support_channels-264-0-0-production-enus/f3c4b3d2-ff86-4f7c-9fe2-3d8b23d35109/images/icon_important.png)

Important OpenSSL v1.1.1 must be used.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-support_channels-264-0-0-production-enus/f3c4b3d2-ff86-4f7c-9fe2-3d8b23d35109/images/icon_important.png)

Important The certificate expires after 1 year by default. You can change the expiration date. When the certificate expires, AWS services can’t talk with your Voice contact center. To ensure uninterrupted service, generate and upload a new certificate before the old certificate expires.

1. Create a folder for holding the generated certificate:
    
    ```html
    $ mkdir certificates
    ```
2. Change the current directory to the certificates folder:
    
    ```html
    $ cd certificates
    ```
3. In the certificates folder, specify a password and generate an RSA private key. Where it says `<your_password>`, specify your own password.
    
    ```html
    $ openssl genrsa -des3 -passout pass:<your_password> -out server.pass.key 2048
    ```
4. Create a key file from the `server.pass.key` file using the password that you created in the previous step:
    
    ```html
    $ openssl rsa -passin pass:<your_password> -in server.pass.key -out server.key
    ```
5. Delete the `server.pass.key`:
    
    ```html
    $ rm server.pass.key
    ```
6. Request and generate the certificate:
    
    ```html
    $ openssl req -new -key server.key -out server.csr
    ```
7. Enter the required information.
    1. Enter your company details.
    2. When prompted for the challenge password, press **Enter**.
        
        The Certificate Authorities use this password to authenticate the certificate owner when they want to revoke their certificate. You can’t revoke it via the Certificate Revocation List (CRL) because it’s a self-signed certificate.
8. Generate the SSL certificate:
    
    ```html
    $ openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt
    ```

The server.crt file is generated as the output. If you’ve manually integrated your contact center, copy the file content and update the values of the reqTelephonyIntegrationCertificate and reqTelephonyIntegrationKeyPairExpDate attributes in the contact center definition file. For more information on the attributes, see [Prepare Contact Center Definition File](https://help.salesforce.com/s/articleView?id=service.voice_flex_ccd.htm&type=5&language=en_US).