---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create encryption keys and certificate

# Create encryption keys and certificate {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create encryption keys and a certificate using terminal commands on your local environment.

## Before you begin

Role required: none

## Procedure

1. In your local environment, open Terminal (on Mac or Linux), or Command Line (in Windows).
2. Using the terminal, use `cd` to move into the folder where you want to store your encryption keys.
3. Using the terminal, enter the following:  

       openssl req -newkey rsa:4096 -nodes -keyout sm_private_key.pem -x509 -days 365 -out sm_public_cert.pem

   Note:  
   This example uses OpenSSL to generate keys and certificates. You may substitute other comparable tools based on your requirements.  
   The command generates a private key and a public certificate (with the matching public key). A series of prompts for required information follows, starting with "Country Name."
4. Fill in the prompts with the requested information.  
   The following prompts appear.
   * Country Name
   * State of Province Name
   * Locality Name (for example, city)
   * Organization Name (for example, company)
   * Organizational Unit name (for example, section)
   * Common Name (for example, fully qualified host name)
   * Email address

   {#client-access-example-1__ul_x2b_yv1_jxb}Work with your security team to verify that you enter the correct certificate information.
5. Check the folder you that chose in step 2 to verify that the private key and public certificate have been created.  
   If you used the same file names as in the step 3 example, you should see the following files:
   * sm_private_key.pem
   * sm_public_cert.pem
   {#client-access-example-1__ul_hpj_by1_jxb}
6. In the same folder, use the following command:  
   Important:  
   The specific command to use depends on your operating system.

   |-|-|
   | For Linux: | cat sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pem |
   | For Windows: | sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pem |
   [ ]

   {#client-access-example-1__table_f4s_2k2_51c}

   This command bundles the private key and public certificate into a single file to load into your MID Server in later steps.
7. Check the folder again to verify that the new file containing your private key (sm_keypair_bundle.pem) and public certificate has been created.