Obtaining a client certificate for the Syslog protocol

You must obtain a client certificate from the SVP to enable the Syslog protocol.

  1. Create a private key (.key file).

  2. Create a public key (.csr file).

  3. Send the new key to the Syslog server Certificate Authority for signature to obtain a certificate. The certificate is used as the client certificate.

    CautionIf the certificate expires, you cannot connect to the Syslog server.

  4. Open a Windows command prompt, and then set the current directory to the directory where the PKCS#12 format client certificate is output.

  5. Store the private key (.key file) and client certificate in this folder, and then execute the command below. 

    C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt -inkey client.key -outclient.p12

    Where

    • Folder to which the PKCS#12 format client certificate is output: C:\key
    • File name of the private key: client.key
    • File name of the client certificate: client.crt

  6. Set the password.

    You can use a password of up to 128 alphanumeric characters and 31 of the following symbols:

    ! # $ % & ' ( ) * + ,- . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~

    If you use more than 50 letters, use the following command option example, where XXXX...X is the password: 

    C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt  client.key -out-inkey client.p12 -password pass:XXXX...X

Parent Topic