Create and configure the RSA key pair for the digital signature

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분

    • Create an RSA key pair that the proxy server can use to create the digital signature for signing changes to the encryption properties and configuration.

    시작하기 전에

    Role required: admin

    To generate and validate the digital signature, an RSA key pair must be generated and stored in the JCEKS Java KeyStore and each proxy must be configured to use this key pair. Generate an encryption key pair using the keytool command.

    To use the keytool utility with a proxy installed on SElinux (CentOS), you must enable loading of shared libraries from the proxy java-installation directory. To do this, run the following command as root.

    chcon -R -t texrel_shlib_t proxy_install_dir/java/jre /lib

    You must use the Java 1.8 version of the keytool utility. A copy of the utility can be found in <proxy install dir>java/jre/bin/keytool.

    프로시저

    1. Change to the KeyStore directory in the proxy download directory.
    2. Change the default password.

      The default password is changeme.

      keytool -keystore keystore.jceks -storetype jceks -storepasswd -new <newpassword>
    3. Create an encryption key pair.
      주:
      Do not enter a password for the key when the keytool utility prompts for one.

      Enter this command on a single line.

      keytool -genkeypair -alias <key alias> -keyalg rsa -keystore keystore.jceks 
-storetype jceks -storepass <keystore password> -keysize 2048
    4. Update the encryption proxy property file (edgeencryption.properties).
      1. Change to the <installation directory>/conf/ directory.
      2. Open the edgeencryption.properties file.
      3. Enter the properties for the digital signature.

        These properties must be the same for all proxies.

    5. Save and close the edgeencryption.properties file.