ECS 3.5.0.1 Administration Guide

Create a private key

You must create a private key to sign self-signed certificates and to create signing requests.

1. Log in to an ECS node or to a node that you can connect to the ECS cluster.
2. Use the openssl tool to generate a private key.
   For example, to create a key called server.key, use:

   openssl genrsa -des3 -out server.key 2048

3. When prompted, enter a passphrase for the private key and reenter it to verify. You will need to provide this passphrase when creating a self-signed certificate or a certificate signing request using the key.
   You must create a copy of the key with the passphrase removed before uploading the key to ECS. For more information, see Upload a certificate.
4. Set the permissions on the key file.

   chmod 0400 server.key