Generate a new certificate

In this topic, you learn how to generate a new authentication certificate.


  • There are no prerequisites.


  1. In the Cockpit, go to Security and click Certificates.

    Result: A list with all existing authentication certificates is shown.

    security certificate
  2. Click Add.

  3. In the General tab, enter a name for the certificate.

  4. You can enter a description and choose a package for the certificate.

  5. In the Attributes tab, enter specific values for the certificate.

    1. Sign with: Self-signed is default. You can choose another predefined certificate as well.

    2. Bit Size: 2048 bit is default. You can choose 1024 and 4096 as well.

    3. Serial Number: 01 is default. You can choose another number.

    4. Click Use encyption (sha-256) if you use a server-side certificate or Client Certificate if the certificate should be used on the client side.

    5. Customize the validity. The default is one year.

    6. Enter a Common Name (CN) for the certificate and fill in the other data.

  6. Click Generate New Certificate.

    Result: The generated keys are shown in the Keys tab.

    Click Download to download the keys as txt file.


  • You have generated a new certificate and the corresponding keys.