diff --git a/confluent_server/bin/createcert.sh b/confluent_server/bin/createcert.sh
new file mode 100644
index 00000000..e349d5dc
--- /dev/null
+++ b/confluent_server/bin/createcert.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+umask 0077
+openssl ecparam -name secp384r1 -genkey -out /etc/confluent/privkey.pem
+openssl req -new -x509 -key /etc/confluent/privkey.pem -days 760 -out /etc/confluent/srvcert.pem -subj /CN=$(hostname)