**This is an old revision of the document!**
Creating a CSR (Certificate Signing Request)
Log in as smeconfiguser then become root
openssl req -new -newkey rsa:2048 -nodes -out my_fqdn.com.csr -keyout my_fqdn.com.key -subj "/C=US/ST=MyState/L=MyCity/O=MyOrganization/OU=MyOrganizationalUnit/CN=my.fqdn.com"
This will generate 2 files:
my_fqdn.com.key my_fqdn.com.csr
Copy the file my_fqdn.com.key to the private certs folder
cp my_fqdn.com.key /etc/pki/tls/private/
Ensure the file is in the proper location before deleting it:
cat /etc/pki/tls/private/my_fqdn.com.key rm my_fqdn.com.key
Send the CSR to the Certificate Authority of choice
cat my_fqdn.com.csr
The certificate authority will reply with a signed public key and intermediary certs. These can be uploaded to the File Fabric when configuring via smeconfigserver.