Create encryption keys and certificate

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 3분
  • Create encryption keys and a certificate using terminal commands on your local environment.

    시작하기 전에

    Role required: none

    프로시저

    1. In your local environment, open Terminal (On Mac or Linux), or Command Line (in Windows).
    2. Using the terminal, use cd to move into the folder where you want to store your encryption keys.
    3. Using the terminal, enter the following:
      openssl req -newkey rsa:4096 -nodes -keyout sm_private_key.pem -x509 -days 365 -out sm_public_cert.pem
      주:
      This example uses OpenSSL to generate keys and certificates. You may substitute other comparable tools based on your requirements.
      The command generates a private key and a public certificate (with the matching public key). A series of prompts for required information follows, starting with “Country Name.”
    4. Fill in the prompts with the requested information.
      The following prompts appear.
      • Country Name
      • State of Province Name
      • Locality Name (eg, city)
      • Organization Name (eg, company)
      • Organizational Unit name (eg, section)
      • Common Name (eg, fully qualified host name)
      • Email address
      Work with your security team to ensure you enter the correct certificate information.
      Prompts displayed by openssl
    5. Check the folder you that chose in step 2 to verify that the private key and public certificate have been created.
      If you used the same file names as in the step 3 example, you should see the following files:
      • sm_private_key.pem
      • sm_public_cert.pem
    6. In the same folder, use the following command:
      중요사항:
      The specific command to use depends on your operating system.
      For Linux:
      cat sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pem
      For Windows:
      sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pem

      This command bundles the private key and public certificate into a single file to load into your MID Server in later steps.

    7. Check the folder again to verify that the new file containing your private key (sm_keypair_bundle.pem) and public certificate has been created.