Spectra T50e - Configuring Optional Library Settings

Chapter 4—Configuring the Library Configuring Optional Library Settings
August 2017 User Guide—Spectra T50e Library
121
CONFIGURING OPTIONAL LIBRARY SETTINGS
Thissectiondescribesoptionalconfigurationsettingsthatyoumayselect
touseforyourlibraryandoperatingenvironment.Ifyoumakechangesto
thesesettings,besuretomanuallybackupthelibraryconfigurationwhen
youarefinished(seeBackUptheLibraryConfigurationManuallyon
page116).
Install a Security Certificate and Authentication Key
IfyouenabledSSL(seeEnableSSLonpage108),usethefollowingstepsto
obtainandinstallasecuritycertificateandprivatekey.
1. Obtainasecuritycertificateandprivatekeyusingoneofthefollowing
methods:
 Create a Self-Signed Certificate
Forexample,tocreateaself‐signedcertificateandauthentication
keyusingopenssl,usethefollowingcommand.
openssl req -x509 -nodes -days 365 
-newkey rsa:2048 -keyout ssl.key -out ssl.crt
Theopenssl reqcommandisacertificaterequestandcertificate
generatingutility.Thefollowingparametersareusedinthe
example:
 -x509‐Thisoptionoutputsaselfsignedcertificateinsteadofa
certificaterequest.
 ‐nodes‐Thisoptionspecifiesthattheprivatekeynotbe
encrypted.
 -days n‐Whenthe-x509 optionisalsoused,thisoption
specifiesthenumberofdays(n)thatthecertificateisvalid.
 -newkey rsa:nbits‐GeneratesanRSAkeynbitsinsize.The
LibrarysupportsRSAkeysinbitsof512,768,1024and2048.
 -keyout filename ‐Thisoptionspecifiestheprivatekeyfile
name.
 -out filename‐Thisoptionspecifiesthecertificatefilename.
Important
The ssl.crt and ssl.key files can only contain ONE certification or key. The BlueScale
software does not support multiple keys (chaining keys) in the key or certificate
files. If there are multiple keys in the files, they are all considered invalid.
Important
When generating a self signed certificate using openssl, use the -x509 command
line option. Loading a file without this option may cause the LCM to hang.
Important
When generating a self signed certificate or a certificate signing request using
openssl, use the -nodes command line option to prevent the key from being
encrypted.