Obtaining a client certificate for the Syslog protocol

Procedure

1. Create a private key (.key file).

2. Create a public key (.csr file).

3. Send the new key to the Syslog server Certificate Authority for signature to obtain a certificate. The certificate is used as the client certificate.

 If the certificate expires, you cannot connect to the Syslog server.

4. Open a Windows command prompt, and then set the current directory to the directory where the PKCS#12 format client certificate is output.

5. Store the private key (.key file) and client certificate in this folder, and then execute the command below.

C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt -inkey client.key -outclient.p12

Where

• Folder to which the PKCS#12 format client certificate is output: C:\key

• File name of the private key: client.key

• File name of the client certificate: client.crt

6. Set the password.

You can use a password of up to 128 alphanumeric characters and 31 of the following symbols:

! # $ % & ' ( ) * + ,- . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~

If you use more than 50 letters, use the following command option example, where XXXX...X is the password:

C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt  client.key -out-inkey client.p12 -password pass:XXXX...X