Trying to issue new certificate for a IPA host and its prompting for a "NSS Certificate DB" password or Pin ?

Issue

Trying to issue new certificate for a IPA host and its prompting for a password ?

Following the instructions from the window pops up when click on "host certificate --> New Certificate" on IPA server.

Create a certificate database or use an existing one. To create a new database:
# certutil -N -d <database path>

Create a CSR with subject CN=<hostname>,O=<realm>, for example:
# certutil -R -d <database path> -a -g <key size> -s 'CN=host1.example.com,O=EXAMPLE.COM'

**Enter Password or Pin for "NSS Certificate DB":**