IBM TS4300

Uploading the certicate package to the tape library
To upload the certicate, log in to the management GUI and select Settings > Security > Secure
Communications. From the Secure Communications page, select On and specify the PEM le containing
the certicate.
Advanced command examples
The following commands are used by development to generate certicates for testing. These commands
use the –newkey option to generate both the private key and the certicate with a single command. Refer
to the OpenSSL command help for information on the other options used here.
Self-signed certicate with private key encrypted; must enter passphrase
• Windows
Openssl> req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 1460
• Linux
$ openssl req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 1460
Self-signed certicate with private key not encrypted
• Windows
Openssl> req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 3650 –nodes
• Linux
$ openssl req -x509 -sha256 -newkey rsa:2048 -keyout key.pem -out cert.pem
-days 3650 –nodes
IBM Condential
188IBM TS4300 Tape Library Machine Type 3555: User's Guide