Uploading the certiîš´cate package to the tape library
To upload the certiîš´cate, log in to the management GUI and select Settings > Security > Secure
Communications. From the Secure Communications page, select On and specify the PEM îš´le containing
the certiîš´cate.
Advanced command examples
The following commands are used by development to generate certiîš´cates for testing. These commands
use the –newkey option to generate both the private key and the certicate with a single command. Refer
to the OpenSSL command help for information on the other options used here.
Self-signed certiîš´cate with private key encrypted; must enter passphrase
• Windows
Openssl> req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 1460
• Linux
$ openssl req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 1460
Self-signed certiîš´cate with private key not encrypted
• Windows
Openssl> req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 3650 –nodes
• Linux
$ openssl req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 3650 –nodes
IBM Conîš´dential
188IBM TS4300 Tape Library Machine Type 3555: User's Guide