Certificate Creation using keys from Fortanix DSM

Steps to be followed:  

1. Login to SWG using CLI.
2. On the root directory, create a new file “fortanix.cfg”, which stores the API_KEY value.

3. The content of the “fortanix.cfg” will be:

   api_key = "API_KEY"

   Example: 
4. follow the below commands:

   [root@mwgappl14937245 ~]# chmod 777  fortanix.cfg

   [root@mwgappl14937245 ~]# export FORTANIX_PKCS11_NUM_SLOTS=1

   [root@mwgappl14937245 ~]# echo $FORTANIX_PKCS11_NUM_SLOTS

   1

   [root@mwgappl14937245 ~]# openssl1.1

   OpenSSL> engine -pre MODULE_PATH:/opt/fortanix/pkcs11/fortanix_pkcs11.so -pre VERBOSE pkcs11

5. Output:
   
    

6. Use the openssl “req” command to generate the certificate: 

OpenSSL> req -engine pkcs11 -keyform engine -new  -key "pkcs11:object=<Key>;pin-value=file:///root/fortanix.cfg" -x509 -days 3650 -out FILENAME.crt -set_serial 0xdeadbeef 

7. This will give the option to create the certificate file: