Create Root Key and Root Certificate

Follow the instructions to create a self-signed certificate. These instructions are written for OpenSSL 3.0.x.

Execute the following code:

openssl genrsa -aes256 -out root.key 4096

You are prompted to enter the password.

Enter the

password

of your choice.

Execute the following code for issuer certificate:

openssl req -x509 -new -nodes -key root.key -sha256 -days 1826 -out root.crt

Enter the

Name

of your choice in the field..

This name <e.g. zebra.com> will be reflected in the final certificate.

openssl x509 -text -in root.crt

Save the value displayed in the

Serial Number

field that is required for the verification step later at the time of enabling the secure connection.