2. Run req command to generate a "certificate request" using the private key created in the 1st step - References - SIMATIC AX - AX Hardware Engineering documentation - Hardware Engineering,

Hardware Engineering reference
Portfolio
SIMATIC AX
Product
SIMATIC AX
Software version
2.0.0-alpha1.56
Edition
08/2025
Language
English (original)
Package Name
@ax/hw-docs
openssl req -new -key privateKey.pem -out server.csr -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=CommonNameOrHostname"
  • Explanation of the parameters provided in the command line:
    • openssl req -new : the command for executing OpenSSL to generate a new certificate request.
    • -key privateKey.pem : the file "privateKey.pem", which is created in 1st step, is used to read the private key from.
    • -out server.csr : the file "server.csr" is generated to store the certificate signing request.
    • -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=CommonNameOrHostname" : This is an optional parameter providing the subject containing a Distinguished Name or a DN. You may modify it based on your company identity.
      • In case this parameter is not provided, the application then asks for specific information regarding the certificate authority (CA) signing the certificate. What you are about to enter is what is called a Distinguished Name or a DN.
  • Detailed documentation about the openssl req command can be found in OpenSSL documentation for req parameter.