How to generate a self signed SSL certificate for Public IP address (2024)

Published:

This section provides instructions on creating a self-signed SSL certificate for a public IP address.

Download the suitable OpenSSL package by using the following link.
Unzip the OpenSSL zip file on your machine.
Download the following file on your local machine and open PowerShell from this location.
samples.conf
Add your public IP in the above file like below.

Run the following command to create the cert and key file.

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout cert.key -out cert.crt -config .\<yourfilename>.conf -extensions v3_req

Run the following command to generate the .pfx file and enter the password for the .pfx file.
See Also
New-SelfSignedCertificate (pki)- Create an eSignature with Adobe Acrobat Reader Creating a Self Signed Certificate How to Create a Self-Signed SSL Certificate with SAN for Apache on Ubuntu
```
openssl pkcs12 -export -out certificate.pfx -inkey cert.key -in .\cert.crt
```
Now the cert, key, and pfx files are created in that location like below.
Enable SSL for Bold BI with the created .pfx file by following the link .
Now you can access the site, the site will return the error like below.
Now you can export the certificate for the site.
Import the exported certificate to the trusted root authority on your machine, Go to Manage user certificate.
Select Trusted Root Certification Authorities, right click, and select Import to open the Certificate Import Wizard.
Click Next and browse to find the root certificate you exported before, then click to accept the default values on each screen.
Click Finish to complete the wizard.
Now you can access Bold BI with https://