HP XP7 Storage - Manual (Page 16)

Creating a private key (.key file)
A private key is required to create an SSL keypair. The following procedure is for the Windows
Vista operating system.
Before you begin, download openssl.exe from the OpenSSL website.
To create a private key (.key file) in a Windows Vista environment:
1.
If the read-only attribute is set, release it from the c:\openssl folder.
2. Open a command prompt.
3. Move the current directory to the folder to which the key file is output (such as c:\key), and
execute the following command:
c:\key > c:\openssl\bin\openssl genrsa -out server.key 2048
This procedure creates a file called server.key in the c:\key folder. This file becomes the private
key.
Creating a public key (.csr file)
A public key is required to create an SSL keypair. The following procedure is for the Windows
Vista operating system.
Before you begin, download openssl.exe from the OpenSSL website.
To create a public key in a Windows Vista environment:
1. Open a command prompt.
2. Move the current directory to the folder to which the key file is output (such as c:\key). Execute
the following command:
c:\key > c:\openssl req -sha256 -new -key server.key -config
c:\openssl\bin\openssl.cfg -out server.csr
3. Enter the following information in the prompt:
•
Country Name (two-letter code)
•
State or Province Name
•
Locality Name
•
Organization Name
•
Organization Unit Name
•
Common Name
To create a self-signed certificate, enter the IP address of the web server (SVP). The name
you entered here is used as the server name (host name). To obtain a signed and trusted
certificate, ensure that the server name is the same as the host name of the SVP.
•
Email Address
•
Challenge password (optional)
•
Company name (optional)
The following example shows the contents of a command window when you create a public key.
......++++++
..++++++
is 65537 (0x10001)
C:\key>c:\openssl\bin\openssl req -sha256 -new -key server.key -config c
There are quite a few fields but you can leave some blank
You are about to be asked to enter information that will be incorporated into your certificate request. What
you are about to enter is what is called a Distinguished Name or a DN.
\openssl\bin\openssl.cfg -out server.csr
16 Setting up Remote Web Console