RSA key certificates
To have different cluster nodes use the same settings, you need to install the same RSA key certificate for all of them. To create keys and certificates, you can use tools like OpenSSL and services like Active Directory.
This certificate should contain both a public and a private key, as well as the following attribute: subject="FineReaderServer.14.ConfigurationKey".
Creating a certificate using the OpenSSL tool
To create a certificate using OpenSSL, do the following:
- Create a self-signed certificate with an RSA key.
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha512 -days 3650 -subj '/CN=FineReaderServer.14.ConfigurationKey'
Next, enter your pass phrase.
- Export the certificate in PKCS #12 format (will be installed later).
openssl pkcs12 -export -out frs.pfx -inkey key.pem -in cert.pem
Enter your pass phrase again. Then, set an export pass for the certificate.
- Install the exported certificate file called frs.pfx in the Local Machine\Personal storage on server nodes FRSNode1 and FRSNode 2.
26.03.2024 13:49:48