diff --git a/nfd/debian/nfd.postinst b/nfd/debian/nfd.postinst
new file mode 100644
index 0000000..d608129
--- /dev/null
+++ b/nfd/debian/nfd.postinst
@@ -0,0 +1,31 @@
+#!/bin/sh -e
+
+if [ "$1" != "configure" ]; then
+        exit 0
+fi
+
+mkdir -p /var/log/ndn
+chown -R ndn:ndn /var/log/ndn
+
+if [ ! -f /etc/ndn/certs/localhost_daemons_nrd.ndncert ]; then
+    # Create HOME and generate self-signed NDN certificate for nfd
+    mkdir -p /var/lib/ndn/nfd/.ndn
+    HOME=/var/lib/ndn/nfd ndnsec-keygen /localhost/daemons/nfd | \
+      HOME=/var/lib/ndn/nfd ndnsec-install-cert -
+
+    # Create HOME and generate self-signed NDN certificate for nrd
+    sudo mkdir -p /var/lib/ndn/nrd/.ndn
+    sudo chown -R ndn:ndn /var/lib/ndn/nrd
+    sudo -u ndn -g ndn HOME=/var/lib/ndn/nrd ndnsec-keygen /localhost/daemons/nrd | \
+      sudo -u ndn -g ndn HOME=/var/lib/ndn/nrd ndnsec-install-cert -
+
+    # Dump RIB Management daemon's certificate
+    sudo mkdir /etc/ndn/certs
+    sudo sh -c 'sudo -u ndn -g ndn HOME=/var/lib/ndn/nrd \
+      ndnsec-dump-certificate -i /localhost/daemons/nrd \
+      > /etc/ndn/certs/localhost_daemons_nrd.ndncert'
+fi
+
+#DEBHELPER#
+
+exit 0