Use the following procedure to create a public key using the OpenSSL software.
- Open a Windows command prompt with administrator permissions.
- At the command prompt, run the following command:
openssl req -new -noenc -out c:\key\server.csr -keyout c:\key \server.key -config c:\key\req.txt
Example of req.txt:
[ req ] default_bits = 2048 prompt = no default_md = sha256 req_extensions = req_ext distinguished_name = dn [ dn ] C = JP ST = Kanagawa L = Yokohama O = Hitachi Vantara OU = Storage CN = VSP [ req_ext ] subjectKeyIdentifier = hash extendedKeyUsage = serverAuth keyUsage = critical, digitalSignature, keyEncipherment basicConstraints = CA:FALSE subjectAltName = @alt_names [ alt_names ] DNS.1 = hitachivantara.example.com IP.1 = 192.168.0.1
For extendedKeyUsage, set the usage of the certificate:
- serverAuth: for server certificate
- clientAuth: for client certificate
For basicConstraints, set the CA flag. If you create a self-signed certificate, set CA:TRUE to sign yourself.
After [alt_names], enter the host name of the storage system in DNS.1 and IP address of the storage system in IP.1. The entered name is used as the server name (host name) for SSL/TLS communication. The entered server name and the storage system name (host name) must be the same.
server.csr is created in the C:\key folder as the public key.