Configure TLS with client certificate

IMPORTANT: The client and server must use the same Certificate Authority (CA) for the client and server certificates.
The following are required:
  • OpenSSL installed on the device.
  1. In Command Prompt, create a client key by entering:
    openssl genrsa -des3 -out client.key 2048
  2. Create a client certificate request using the key:
    openssl req -new -out client.csr -key client.key
  3. Use the CA key to sign the client certificate request from step 2:
    openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 360
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.