Generating Certificate Authority (CA) private keys and certificates in InterScan Web Security Virtual Appliance (IWSVA)

To create a private key and self-signed certificate:

1. Log on to the IWSVA server using the Command Line Interface (CLI).
2. Run the following command:

   openssl req -x509 -newkey rsa:1024 -keyout /tmp/root_key.pem -out /tmp/root_req.pem

   Or alternatively, create a SHA256 self-signed certificate:

   openssl req -x509 -sha256 -newkey rsa:2048 -keyout /tmp/root_key.pem -out /tmp/root_req.pem

   This will create the following files:

   • /tmp/root_key.pem – contains the private key encrypted with the password you specified
   • /tmp/root_req.pem – contains the self-signed certificate
3. Copy the files from the IWSVA server to your local machine.
4. Open the IWSVA management console.
5. Go to HTTP > HTTPS Decryption > Settings > Certificate Authority.
6. In the Import CA section, go to the Certificate field and browse to the location of the root_req.pem file.
7. Go the Private Key field and browse to the location of the root_key.pem file.
8. In the Passphrase and Confirm passphrase fields, enter the password that you specified in Step 2.
9. Click Import CA > OK.

For information on configuring HTTPS decryption, refer to the following IWSVA Administrator Guides:

• IWSVA 5.6
• IWSVA 6.0
• IWSVA 6.5