Generating and Converting Private Keys and Public Certificates for Use with Secure FTP Server - FIPS

The OpenSSL command-line tool can be used to generate and convert private keys and public certificates.

Refer to Using OpenSSL for the general instructions for using the tool.

Refer to the procedures below for using OpenSSL to generate or convert private keys and public certificates for use with Secure FTP Server - FIPS.

The Create SSL Certificate wizard in Secure FTP Server is a user-friendly Windows GUI-based tool that guides you through the process of creating keys and certificates.

Use this procedure if you want to generate a public certificate and unencrypted key by hand instead of generating one from within Secure FTP Server - FIPS.

Use this procedure if you want to generate a public certificate and encrypted key by hand instead of generating one from within Secure FTP Server - FIPS.

Use this procedure if you want to generate a compatible PFX/P12 file containing a public certificate and key.

Use this procedure when a you already have a public certificate and PEM encoded PKCS#8 format encrypted private key file. You can determine the format by viewing the private key file in a text editor. If it contains the following line, then this procedure most likely applies:

-----BEGIN ENCRYPTED PRIVATE KEY-----

Use this procedure when a you already have a public certificate and traditional PEM encoded encrypted private key file. You can determine the format by viewing the private key file in a text editor. If it contains the following line, then this procedure most likely applies:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED

Use this procedure when you want to convert an existing incompatible PKCS#12 format encrypted private key/public certificate file to a compatible PKCS#12 format file.