Generating, signing and exporting keys and certificates ...evardsson.github.io/s3c3/Generating,...

Start XCA

Generating, signing and exporting keys and certificates with XCA

Generating, signing and exporting keys and certificates with XCA Page 1

Create a new database

Name and save your database

Select a password - you will need this every time you reopenthis database

Generate a new private key for the root CA

Name it something like s3c3_root - we are using 4098 bits forthe example

Your shiny new key

Create a new self-signed certificate

Make sure the selected template is CA and click on Applyextensions

Fill out the subject fields

In extensions, make sure it is marked as type "CertificationAuthority" and "Critical" and "Subject Key Identifier" checked- set lifetime to 10 years

Make sure Certificate Sign and CRL Sign are selected underKey usage and click OK

You should have a new CA Certificate now

Create a new client certificate - start with a new Certificatesigning request

Set the template to HTTPS_client and click Apply extensions

Fill out the subject and click on Generate a new key

Set the name of the server (server1 in this example) and add_client to the name - use a 2048 bit key or larger

Make sure to also select Non Repudiation in the Key usagepane and click OK

In the Certificates pane, click on New Certificate

Check Sign this request, uncheck copy extensions, make sureto check "Use this Certificate for signing" and use your root,select HTTPS_client in templates and click Apply all

Make sure Non Repudiation is also selected and click on OK

Generating a server certificate is the same as a client, exceptyou will use the HTTPS_server templateNote that you WILL need to choose "Use this Certificate for signing" and select your root key. I forgotto while building the screenshots and had to rebuild this certificate.

X Certificate and Key management

Export the keys for server 1, the private server key ...

... which should be named servername.pem (server1.pem forour example server1)

Export the client private key (servername_client.pem - orserver1_client.pem for our example server1)

Export the certificates - same naming scheme as the keys, butwith the crt extension

... client certificate the same

And don't forget the root CA certificate

Generating, signing and exporting keys and certificates ...evardsson.github.io/s3c3/Generating,...

Documents

Transcript of Generating, signing and exporting keys and certificates ...evardsson.github.io/s3c3/Generating,...

Signing Statements, Executive orders, Executive Agreements Signing statements: .

NEUSTAR, INC. DNS Practice Statement for the NEUSTAR Zone · Neustar is the NEUSTAR Zone Key Signing Key Operator. Neustar is responsible for generating the NEUSTAR Zone's Key Signing

esMD HIH Onboarding Manual - CMS...HIH Onboarding/ Offboarding Manual Version 1.1 7 Electronic Submission of Medical Documentation / esMD 3.3.1 Generating a Certificate Signing Request

Printing, Exporting, Faxing, and E‑Mailing · E-mailing a document to several recipients.....23 Digital signing of documents.....26 Printing, Exporting, Faxing, and E-Mailing 3.

Exporting Laptops

Tool Exporting

Exporting Hazards

Dr Dev Kambhampati | A Basic Guide to Exporting- Exporting Services

Exporting Democracy

Generating Certificate Signing RequestsGenerating Certificate Signing Requests Page 12 Apache To generate a CSR, you will need to create a key pair for your server. These two items

Exporting to

Exporting America

Exporting bynumbers71111

Exporting goods or exporting debts? - Eurodad

Electronic Commerce School of Library and Information Science Cryptography: Using PGP I. Generating and managing keys Signing keys Extracting and sending.

Exporting Basics

Engage iOS Admin Guide 7 - SharePoint Mobile Apps · •!SharePoint!2013! •!SharePoint!Online! ... Generating&a&Certificate&Signing&Request& ... Engage iOS_Admin Guide_7.1 ...

Successful Exporting

Exporting today

FCP Exporting