Create encryption keys and certificate
Create encryption keys and a certificate using terminal commands on your local environment.
Before you begin
Role required: none
Procedure
- In your local environment, open Terminal (on Mac or Linux), or Command Line (in Windows).
-
Using the terminal, use
cdto move into the folder where you want to store your encryption keys. -
Using the terminal, enter the following:
openssl req -newkey rsa:4096 -nodes -keyout sm_private_key.pem -x509 -days 365 -out sm_public_cert.pemNote:This example uses OpenSSL to generate keys and certificates. You may substitute other comparable tools based on your requirements.The command generates a private key and a public certificate (with the matching public key). A series of prompts for required information follows, starting with “Country Name.” -
Fill in the prompts with the requested information.
The following prompts appear.
- Country Name
- State of Province Name
- Locality Name (for example, city)
- Organization Name (for example, company)
- Organizational Unit name (for example, section)
- Common Name (for example, fully qualified host name)
- Email address
-
Check the folder you that chose in step 2 to verify that the private key and public certificate have been created.
If you used the same file names as in the step 3 example, you should see the following files:
- sm_private_key.pem
- sm_public_cert.pem
-
In the same folder, use the following command:
Important:The specific command to use depends on your operating system.
For Linux: cat sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pemFor Windows: sm_private_key.pem sm_public_cert.pem > sm_keypair_bundle.pemThis command bundles the private key and public certificate into a single file to load into your MID Server in later steps.
- Check the folder again to verify that the new file containing your private key (sm_keypair_bundle.pem) and public certificate has been created.