BackBox H4.00 Tape Encryption Option
Configuration
26 BackBox H4.00 Tape Encryption
c:\OpenSSL-Win64\bin>openssl req -newkey rsa:1024 -keyout ClientKey.pem -out REQ-
ClientCert.pem
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.......................................++++++
..........................++++++
writing new private key to 'ClientKey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:.
State or Province Name (full name) [Some-State]:.
Locality Name (eg, city) []:.
Organization Name (eg, company) [Internet Widgits Pty Ltd]:.
Organizational Unit Name (eg, section) []:.
Common Name (eg, YOUR name) []:BBOX1
Email Address []:.
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:.
An optional company name []:.
c:\OpenSSL-Win64\bin>
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:.
An optional company name []:.
c:\OpenSSL\bin>
Signing client Certificate and CA Certificate
3- Now we have the private key and a certificate request. We will need to sign it
again a CA. Use a local CA install on the key manager server. In the










