Integration Guide › Integrate an Eracom HSM › Create Certificates › Generate the Certificate Authority Key Pair

Generate the Certificate Authority Key Pair

To create the PEM certificates for the sample DSAs, you need to create a certificate authority, or CA. Create the certificate authority's key pair in the new slot.

To generate the certificate authority key pair

1. Enter the following command.

   ctcert c -k -lrootCA -sslot-number
   

2. Enter the user PIN for the slot.
3. Enter the following information about the certificate:
   • Common Name
   • Organization
   • Organizational Unit
   • Locality
   • State
   • Country

   This creates a CA keypair called rootCA. The output looks like this:

   ProtectToolkit C Certificate Utility $Revision: 1.52 $
   Copyright (c) Eracom Technologies 2003
   Enter user PIN for <Slot 2> DocoTest:
   Please enter the Subject DN for the key pair and certificate.
   Common Name: RootCA
   Organization: CA
   Organizational Unit: Labs
   Locality: Mooroolbark
   State: VIC
   Country: AU
   Generating new key pair, please wait...
   Creating certificate for 'rootCA'
   Issuer: 'CN=RootCA,O=CA,OU=Labs,L=Mooroolbark,ST=VIC,C=AU'
   Subject: 'CN=RootCA,O=CA,OU=Labs,L=Mooroolbark,ST=VIC,C=AU'
   ctcert: Certificate generated