To Next Page

To Previous Page

Running OpenSSL

OpenSSL is a command-line program, meaning that you enter text commands in a command window and

status and error messages are displayed as the command executes. To run OpenSSL:

• Windows – If you accept the default installation options, the installer will create a directory for the

program on your C:\ drive. For example:

C:\OpenSSL-Win32

To run the program, go to the C:\OpenSSL-Win32\bin directory and double-click the le openssl.exe.

This opens a text window with an OpenSSL> prompt. Enter the commands described below at this

prompt. The les you generate are placed in this same directory.

• Linux – Depends on your installation.

Generating a private key

A private key le is a text le that can be opened with any text editor. The le must have a *.pem

extension. It will look something like this (only much longer):

-----BEGIN RSA PRIVATE KEY-----

Proc-Type: 4,ENCRYPTED

DEK-Info: AES-256-CBC,F6F1F37584D8189C97F23F9DCD431B42

qwabUGR9ag09wq1nDtsB3hSuXtJdOBhEn3Wok6qrIWqE8VL8Ss5N7U4MNIWA4G9A ...

-----END RSA PRIVATE KEY-----

The genrsa command is used to generate an RSA private key le.

The most basic form of the genrsa command species the name of the output le containing the key and

species AES256 encryption (required).

• Windows

Openssl> genrsa -out key-filename.pem -aes256

• Linux

$ openssl genrsa -out key-filename.pem -aes256

The –pass option adds password protection to the certicate. If specied, tape library users will be

required to enter this password to log in to the GUI.

• Windows

Openssl> genrsa -out key-filename.pem -aes256 -passout pass:Passw0rd1

• Linux

$ openssl genrsa -out key-filename.pem -aes256 -passout pass:Passw0rd1

If you do not specify a size for the private key, the genrsa command uses the default value of 512 bits. To

specify a different key size, enter the value as shown in the following example (2048). The key size must

be the last option in the command.

• Windows

Openssl> genrsa -out key-filename.pem -aes256 -passout pass:Passw0rd1 2048

• Linux

$ openssl genrsa -out key-filename.pem -aes256 -passout pass:Passw0rd1 2048

IBM Condential

186IBM TS4300 Tape Library Machine Type 3555: User's Guide

IBM TS4300 User Manual

Other manuals for IBM TS4300