To successfully generate a Certificate Signing Request (CSR) for your UDM-pro device, follow these organized steps:

1. Access UDM-pro Interface: Connect to the UDM-pro web interface via your network provider's login credentials.

2. Configure Hostname:

   • Navigate to Settings > Controller Settings > Advanced Configuration.
   • Enter the desired subdomain or domain name in the provided field.
   • Save the changes. This step triggers the creation of necessary files in the specified folder.

3. Generate CSR Using OpenSSL:

   • Open a terminal and run the following command:

     openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
     

   • Replace server.key and server.csr with appropriate filenames.
   • Ensure the private key is securely stored for future use.

4. Obtain Trusted SSL Certificate:

   • Use the generated CSR (server.csr) to request a trusted SSL certificate from your Certificate Authority (CA).
   • After obtaining the new SSL files, ensure they are named appropriately and ready for installation.

5. Install SSL Files:

   • Place the new private key (server.key) and SSL certificate in the folder /mnt/data/unifi-os/unifi-core/config/.
   • Replace any existing default files with your new SSL files in this directory.

6. Security Considerations: Keep the private key secure. Losing it could hinder future SSL renewals or replacements.

7. Post-Installation Check: Ensure all configurations are correct and verify that SSL functions as expected after installation.