Spectra T50e - Install a Security Certificate and Authentication Key

Chapter 4—Configuring the Library Configuring Optional Library Settings
August 2017 User Guide—Spectra T50e Library
122
Afterenteringthecommand,youarepromptedtoprovidethe
followinginformation.Sampleresponsesareshown.
 CountryName(2lettercode)[AU]:US
 StateorProvinceName(fullname)[Some‐State]:Colorado
 LocalityName(eg,city)[]:Boulder
 OrganizationName(eg,company)[InternetWidgitsPtyLtd]:
Spectra Logic
 OrganizationalUnitName(eg,section)[]:DVT Test
 CommonName(e.g.serverFQDNorYOURname)[]:
T950@company.com
 EmailAddress[]:support@company.com
 Request a Certificate Using a Certificate Signing Request
Requestasecuritycertificateandtheauthenticationkeyfromyour
signingauthorityandprocessthekeyforuseinwiththeBlueScale
software.
a. Requestacertificatefromwww.verisign.com,
www.instantssl.com,www.letsencrypt.orgoranotherSSL
certificatevendortoobtainthecertificate.Forexample,to
generateacertificatesigningrequestusingopenssl,usethe
followingcommand:
openssl req -newkey rsa:2048 -nodes 
-subj "/C=US/ST=Colorado/L=Boulder/O=Spectra/
CN=DVT-T950" -out ssl.csr -keyout ssl.key
Theopenssl reqcommandisacertificaterequestandcertificate
generatingutility.Thefollowingparametersareusedinthe
example:
 -newkey rsa:nbits‐Generatesanewcertificatesigning
requestandanewRSAprivatekeynbitsinsize.TheLibrary
supportsRSAkeysinbitsof512,768,1024and2048.
 ‐nodes‐Thisoptionspecifiesthattheprivatekeynotbe
encrypted.
 -subj "arg" ‐Thisoptionprovidestheanswerstomanyof
thepromptsshownintheexampleabove.
 -keyout filename ‐Thisoptionspecifiestheprivatekeyfile
name.
 -out filename‐Thisoptionspecifiesthecertificatesigning
requestfilename.
b. Sendthecertificatesigningrequesttothesigningauthority.A
certificatenamedssl.crtandakeynamedssl.keywillbe
returned.