Create a private key and self-signed certificate

1. Log on to the IWSVA server using the Command Line Interface (CLI).

2. Run the following command:

   #openssl req -x509 -days 1289 -newkey rsa:1024 -keyout /tmp/root_key.pem -out /tmp/root_req.pem

    This will create the following files:

   • /tmp/root_key.pem – contains the private key encrypted with the password you specified
   • /tmp/root_req.pem – contains the self-signed certificate
3. Copy the files from the IWSVA server to your local machine. You may use winscp.
4. Open the IWSVA management console.

5. Go to HTTP > HTTPS Decryption > Settings > Certificate Authority.

   

   Click image to enlarge

6. Under Import CA section, set the following:

   • In the Certificate field, click Browse and and locate the root_req.pem file.
   • In the Private Key field, click Browse and locate the root_key.pem file.
   • In the Passphrase and Confirm passphrase fields, enter the password that you specified in Step 2.

   • Click Import CA > OK.

   

   Click image to enlarge

Verify the validity

1. Log on to the IWSVA server using the Command Line Interface (CLI).

2. Run the following command:

   # openssl x509 -text -inform PEM -in /tmp/root_req.pem