Currently when running the document createCA.sh script on SMGR, the script prompts for CN but leaves the DN defaulted to "OU=MGMT,O=AVAYA". Additionally, the script has a bug in that the DefaultCRLDistPoint and CaDefinedFreshestCRL values is NOT properly updated to reflected the user specified CN. Expand the script to prompt for other standard certificate properties such as O, OU, ST, L, C (or just allow me to specify the entire DN as a string) so the CA properly reflects my organization. Additionally, the ROOTCA Certificate Profile, used by the createCA.sh script, should be updated to disallow insecure key lengths, etc.. Or even better, allow any Certificate Profile be used to create CAs in the web UI, which is currently prohibited by the web UI, which blocks saving profiles with validity periods longer than 2 years. Instead of blocking the save of the certificate profile, block usage of the profile to create identity certificates if its validity date too long.