Creating a certificate signing request

After you obtained access to the keystore, you must create a certificate signing request (CSR).

Complete the following steps to create a CSR:

1. From the command line, change the directory to the keystore location.
   • On Linux®: /opt/tivoli/tsm/tdpvmware/common/webserver/usr/servers/veProfile/resources/security/
   • On Windows: C:\IBM\StorageProtect\webserver\usr\servers\veProfile\resources\security\
2. Create a new certificate by issuing the following command:

   keytool -genkeypair -alias mykey -dname 
   CN=fqdn,OU=unit,O=organization -keyalg RSA -sigalg SHA256withRSA 
   -keysize 2048 -validity days -keystore key.jks -storepass 
   password -keypass password

   Where:

   -alias mykey

   mykey is the unique alias that identifies the certificate in the keystore. It is renamed when the signed certificate is received.

   -dname CN=fqdn,OU=unit,O=organization

   fqdn is the DNS name or fully qualified domain name of the computer on which the Data Protection for VMware vSphere GUI is installed.

   Unit and organization are the organization information that is required by your policies or by the certificate authority.

   -validity days

   The certificate validity period.

   -storepass password

   The keystore password. If you do not know or forgot the keystore password, see Obtaining access to the keystore.

   -keypass password

   The private key password for the certificate. This password must match the keystore password.

3. Create a CSR by issuing the following command:

   keytool -certreq -alias mykey -file certreq.pem -keystore key.jks

   Where:

   -alias mykey

   The certificate alias from the previous step.

   -file certreq.pem

   The file to store the certificate signing request.