Configure TLS with client certificate

Configure TLS with a client certificate by creating a client key, generating a certificate request, and signing it with a Certificate Authority key.
TIP: The client and server must use the same Certificate Authority (CA) for the client and server certificates.
Ensure that OpenSSL is installedon your device.
  1. To Configure TLS with client certificate
  2. In Command Prompt, create a client key by entering:
    openssl genrsa -des3 -out client.key 2048
  3. Create a client certificate request using the key:
    openssl req -new -out client.csr -key client.key
  4. Use the CA key to sign the client certificate request from step 2:
    openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 360
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal