Breadcrumbs

Use the Local CA to Sign CSR

The CSR now needs to be signed by the local CA.

  1. Using a text editor (or using the more <filename> command), open the KMIP_client.csr file.

  2. Select the entire text and copy to your clipboard.

  3. Now, login to the Management Console and navigate to Security > Certificates & CAs > Local Cas.

Be sure to include the first and last lines (-----BEGIN CERTIFICATE REQUEST----- to -----END CERTIFICATE REQUEST--–––).

  1. Select the CA used by your ESKM (in this case, LocalCA), and click Sign Request. The Sign Request window appears.

tmpv5zwolrm.jpg

Sign Certificate Request Window

  1. For Certificate Purpose, select Client.

  2. Paste the CSR text that you have copied to your clipboard (Step 2 above) into the Certificate Request window.

  3. Click Sign Request. The signed client certificate now appears.

tmp_bmdrpne.png

Certificate Information window

  1. After signing the certificate request with a local CA, click on Download to download the file.

  2. Save as the correct name; in this case, /var/lib/mysql/mysql-keyringokv/ssl/cert.pem.