{"id":959,"date":"2023-08-03T08:44:39","date_gmt":"2023-08-03T08:44:39","guid":{"rendered":"https:\/\/certerassl.com\/kb\/?p=959"},"modified":"2024-10-10T04:49:24","modified_gmt":"2024-10-10T04:49:24","slug":"how-to-create-csr-and-key-attestation-using-luna-hsm","status":"publish","type":"post","link":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/","title":{"rendered":"How to Create CSR and Key Attestation using Luna HSM?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Welcome to the comprehensive guide that will walk you through generating Certificate Signing Requests (CSRs) and performing Key Attestation using the highly secure and trusted Luna Hardware Security Module (HSM). <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The information will equip you with the knowledge and best practices to ensure the utmost integrity and protection of your cryptographic keys and certificates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Stay on top of the software development game as a security professional or anyone involved in <a href=\"https:\/\/certera.com\/code-signing\">code signing certificates<\/a>. Keeping industry standards alongside is crucial in today&#8217;s fast-paced technology. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One essential resource you should familiarize yourself with is the <a href=\"https:\/\/cpl.thalesgroup.com\/blog\/encryption\/ca-b-forum-code-signing-requirements-private-keys\">CA\/B Forum Baseline Requirements v2.8<\/a> for Code Signing Certificates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Code signing certificates function as digital signatures, instilling confidence in users that the code they download or install originates from a trusted source and remains untampered.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We will review the CA\/B Forum Baseline Requirements version 2.8 for Code Signing Certificates. This collection of industry standards and guidelines aims to bolster the security and reliability of code signing processes, ensuring a safer digital environment for all users. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let&#8217;s embark on this journey to discover how these requirements enhance the trustworthiness of code signing practices.<\/p>\n\n\n\n<div class=\"wp-block-columns custom-html-widget-bg is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"190\" height=\"122\" sizes=\"(max-width: 190px) 100vw, 190px\" src=\"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/code-icon-jpg.webp\" alt=\"\" class=\"wp-image-1179\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p class=\"wp-block-paragraph\">Buy Trusted Code Signing Certificates from <strong>Certera<\/strong> at pocket-friendly pricing.<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button custom-html-widget-btn\"><a class=\"wp-block-button__link has-white-color has-text-color wp-element-button\" href=\"https:\/\/certera.com\/code-signing\">Obtain Code Signing Certificate<\/a><\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Role and Significance of Certificate Signing Requests (CSRs)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A Certificate Signing Request (CSR) is crucial in obtaining an SSL Certificate from a Certificate Authority. It constitutes a block of text generated on the server where the certificate will be installed. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CSR lies vital information required for the certificate, including the organization name, common name, location, and nation. Moreover, it contains the public key, which is pivotal in signing the certificate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Importance of CSRs:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CSRs are pivotal in facilitating communication between the entity requesting the SSL certificate and the CA. Generating a CSR leads to creating two essential components. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The first is the public key, an integral part of the CSR. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second is the private key, generated simultaneously with the CSR and securely kept on the server. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The confidentiality of the private key is imperative.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Steps for CSR and Key Attestation Creation for Luna Network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This section will help you create a Certificate Signing Request (CSR) and perform key attestation for the Luna Network Attached HSM 7.x. Following these instructions, you can generate a Public Key Confirmation (PKC) file in an RSA key pair context.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">For Luna Network Attached HSM 7.x; you must know this!<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Our focus here lies in the remarkable capabilities of Luna HSMs, particularly their ability to generate a Public Key Confirmation package (PKC) as a key attestation. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This PKC serves as an invaluable verification that a specific key pair was generated and securely stored within the Luna HSM, ensuring the highest level of security.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What does the Attestation Package Format include?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The PKC files generated by Luna HSM utilize the DER-encoded PKCS7 format, efficiently containing all the necessary critical attestation information. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure compatibility with the critical attestation service, it is crucial to encode the PKC file in base64 format.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Instructions to Generate a CSR<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Generating a Certificate Signing Request (CSR) may vary depending on your software, but the fundamental steps remain consistent. Here&#8217;s a general outline to help you through the process:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Preparation<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Before diving into CSR generation, ensure you have all the relevant details. It includes your domain name, organization name, city (locality), state or province name, and country code.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Generate a Key Pair<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The first crucial step is to create a public-private key pair. Keep your private key secure, ensuring it remains within the server or hardware module where it was generated.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Generate the CSR<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Select a CSR generation tool that aligns with your server software. This tool will prompt you to provide the details prepared in Step 1 and the private key generated in Step 2. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Subsequently, the tool will generate an encoded file with the .csr or .req extension.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">During the CSR generation process, you will be prompted to enter details such as the common name, organization, locality, and more essential for the SSL certificate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Formats for Generating a PKC for RSA Keypair:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When generating a PKC for an RSA key pair, you&#8217;ll come across two commonly mentioned formats:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">TC-Trust Center Format:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This format encompasses three certificates within the PKC. However, it&#8217;s important to note that the certificate chain does not conclude with a root certificate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Chrysalis-ITS Format:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In contrast, the Chrysalis-ITS format comprises five certificates arranged within the PKC structure. Moreover, the certificate chain culminates with a root certificate, providing an extra layer of trust.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our strong recommendation is to opt for the Chrysalis-ITS format due to the availability of vendor documentation, which offers further guidance and support throughout the process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With these comprehensive guidelines, you can create your CSR and conduct key attestation using the mighty Luna Network Attached HSM 7.x. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Safeguard your cryptographic operations and enjoy enhanced security and peace of mind with Luna HSM&#8217;s cutting-edge features.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step-by-Step Get CSR and PKC in Chrysalis-ITS Format<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure seamless utilization of the Sectigo key attestation service or reseller-website enrollment form, follow these simple steps to generate a Certificate Signing Request (CSR) and Public Key Confirmation (PKC) in the Chrysalis-ITS format using Luna HSM:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 1:<\/strong> Launch the <strong>Luna remote client<\/strong> and access the Luna HSM by logging in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 2:<\/strong> Employ the <strong>LunaCM2 utility<\/strong> to create an RSA key pair on <strong>Luna Partition1<\/strong>, executing the appropriate commands based on your operating system:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For Windows:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>c:\\ cd c:\\Program Files\\SafeNet\\LunaClient\nc:\\Program Files\\SafeNet\\LunaClient\\&gt; lunacm<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For Linux:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&gt; cd \/usr\/safenet\/lunaclient\/bin\n.\/lunacm<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Generate the RSA key pair using the command below, ensuring you replace &#8220;<strong>LABEL<\/strong>&#8221; with your desired key pair identifier:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cmu gen -modulusBits=3072 -publicExp=65537 -sign=T -verify=T -label=LABEL -extractable=false<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>REMINDER! <\/strong>For successful CSR generation, the parameters &#8220;-extractable=false&#8221; and &#8220;-sign=T&#8221; is mandatory, as Luna will not utilize this key for CSR signing. The RSA key must also be at least 3072 bits for code signing certificates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 3:<\/strong> Retrieve the handle numbers of the <strong>public and private keys<\/strong> with the following commands:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cmu list -class public -label=LABEL\ncmu list -class private -label=LABEL<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 4:<\/strong> Generate a <strong>CSR using the subsequent command<\/strong>, replacing &#8220;MNO&#8221; and &#8220;BCD&#8221; with the respective public and private key handles:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cmu requestcert -publichandle=MNO -privatehandle=BCD -C=CA -L=Ottawa -O=Sectigo -CN=\"PKC Test Cert\" -outputFile=rsacsr.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 5:<\/strong> Now, <strong>create a PKC<\/strong> using the following command, replacing &#8220;MNO&#8221; with your public key handle and &#8220;<strong>attestation.p7b<\/strong>&#8221; with the desired file name:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cmu getpkc -handle=MNO -outputfile=attestation.p7b -pkctype=2 -verify<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 6:<\/strong> Convert the <strong>attestation PKC file to base64 format<\/strong> using the appropriate commands:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For Windows:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>certutil -encode attestation.p7b attestation.b64\nfindstr \/v CERTIFICATE attestation.b64 &gt; attestation.b64<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For Linux:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>base64 attestation.p7b &gt; attestation.b64<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 7:<\/strong> Finally, <strong>submit the generated CSR and base64-encoded attestation<\/strong> to the website enrollment form to verify the HSM&#8217;s authenticity in issuing code signing certificates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These straightforward steps can effortlessly generate a CSR and PKC in the Chrysalis-ITS format, ensuring a secure and reliable process for the Sectigo key attestation service or reseller-website enrollment form. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Safeguard your cryptographic operations with confidence and elevate your code signing certificates to new heights.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to the comprehensive guide that will walk you through generating Certificate Signing Requests (CSRs) and performing Key Attestation using the highly secure and trusted Luna Hardware Security Module (HSM). The information will equip you with the knowledge and best practices to ensure the utmost integrity and protection of your cryptographic keys and certificates. Stay<span class=\"morelink d-block mt-3\"><a href=\"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/\">Read More<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[61,50],"tags":[107,108,106,105],"class_list":["post-959","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-signing","category-generate-csr","tag-attestation-package-submission-for-luna-network-attached-hsm-v7-x","tag-generate-private-key-and-csr-in-luna-hsm","tag-key-generation-and-attestation-with-luna-hsm","tag-luna-network-attached-hsm-v7-x","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Generate a Key Pair &amp; Attestation Certificate in Luna HSM v7.x<\/title>\n<meta name=\"description\" content=\"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Generate a Key Pair &amp; Attestation Certificate in Luna HSM v7.x\" \/>\n<meta property=\"og:description\" content=\"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base - Certera.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/certeraLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-03T08:44:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-10T04:49:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"620\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"certerakbdbuser\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:site\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"certerakbdbuser\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/\"},\"author\":{\"name\":\"certerakbdbuser\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/person\\\/c25e1519e333a817f30c805384cba014\"},\"headline\":\"How to Create CSR and Key Attestation using Luna HSM?\",\"datePublished\":\"2023-08-03T08:44:39+00:00\",\"dateModified\":\"2024-10-10T04:49:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/\"},\"wordCount\":1118,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\",\"keywords\":[\"attestation package submission for Luna Network Attached HSM v7.x\",\"generate private key and CSR in Luna HSM\",\"Key Generation and Attestation with Luna HSM\",\"Luna Network Attached HSM v7.x\"],\"articleSection\":[\"Code Signing\",\"Generate CSR\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/\",\"name\":\"How to Generate a Key Pair & Attestation Certificate in Luna HSM v7.x\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\",\"datePublished\":\"2023-08-03T08:44:39+00:00\",\"dateModified\":\"2024-10-10T04:49:24+00:00\",\"description\":\"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#primaryimage\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp\",\"width\":960,\"height\":620,\"caption\":\"Key Generation and Attestation with Luna HSM\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-create-csr-and-key-attestation-using-luna-hsm\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/certera.com\\\/kb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Create CSR and Key Attestation using Luna HSM?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#website\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/\",\"name\":\"Knowledge Base - Certera.com\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\"},\"alternateName\":\"Certera Knowledgebase\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/certera.com\\\/kb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\",\"name\":\"Certera\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/brand-certera.svg\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/brand-certera.svg\",\"caption\":\"Certera\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/certeraLLC\\\/\",\"https:\\\/\\\/x.com\\\/certera_llc\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/certera-llc\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/person\\\/c25e1519e333a817f30c805384cba014\",\"name\":\"certerakbdbuser\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"caption\":\"certerakbdbuser\"},\"sameAs\":[\"https:\\\/\\\/certerakb.ssltoolsonline.com\"],\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/author\\\/certerakbdbuser\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Generate a Key Pair & Attestation Certificate in Luna HSM v7.x","description":"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/","og_locale":"en_US","og_type":"article","og_title":"How to Generate a Key Pair & Attestation Certificate in Luna HSM v7.x","og_description":"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.","og_url":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/","og_site_name":"Knowledge Base - Certera.com","article_publisher":"https:\/\/www.facebook.com\/certeraLLC\/","article_published_time":"2023-08-03T08:44:39+00:00","article_modified_time":"2024-10-10T04:49:24+00:00","og_image":[{"width":960,"height":620,"url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","type":"image\/jpeg"}],"author":"certerakbdbuser","twitter_card":"summary_large_image","twitter_image":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","twitter_creator":"@certera_llc","twitter_site":"@certera_llc","twitter_misc":{"Written by":"certerakbdbuser","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#article","isPartOf":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/"},"author":{"name":"certerakbdbuser","@id":"https:\/\/certera.com\/kb\/#\/schema\/person\/c25e1519e333a817f30c805384cba014"},"headline":"How to Create CSR and Key Attestation using Luna HSM?","datePublished":"2023-08-03T08:44:39+00:00","dateModified":"2024-10-10T04:49:24+00:00","mainEntityOfPage":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/"},"wordCount":1118,"commentCount":0,"publisher":{"@id":"https:\/\/certera.com\/kb\/#organization"},"image":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","keywords":["attestation package submission for Luna Network Attached HSM v7.x","generate private key and CSR in Luna HSM","Key Generation and Attestation with Luna HSM","Luna Network Attached HSM v7.x"],"articleSection":["Code Signing","Generate CSR"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/","url":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/","name":"How to Generate a Key Pair & Attestation Certificate in Luna HSM v7.x","isPartOf":{"@id":"https:\/\/certera.com\/kb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#primaryimage"},"image":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","datePublished":"2023-08-03T08:44:39+00:00","dateModified":"2024-10-10T04:49:24+00:00","description":"Follow the steps to generate secure Certificate Signing Requests and attestation certificate with Luna Network Attached HSM v7.x.","breadcrumb":{"@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#primaryimage","url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","contentUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/08\/csr-generation-and-key-attestation-using-luna-hsm-jpg.webp","width":960,"height":620,"caption":"Key Generation and Attestation with Luna HSM"},{"@type":"BreadcrumbList","@id":"https:\/\/certera.com\/kb\/how-to-create-csr-and-key-attestation-using-luna-hsm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/certera.com\/kb\/"},{"@type":"ListItem","position":2,"name":"How to Create CSR and Key Attestation using Luna HSM?"}]},{"@type":"WebSite","@id":"https:\/\/certera.com\/kb\/#website","url":"https:\/\/certera.com\/kb\/","name":"Knowledge Base - Certera.com","description":"","publisher":{"@id":"https:\/\/certera.com\/kb\/#organization"},"alternateName":"Certera Knowledgebase","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/certera.com\/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/certera.com\/kb\/#organization","name":"Certera","url":"https:\/\/certera.com\/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/kb\/#\/schema\/logo\/image\/","url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/01\/brand-certera.svg","contentUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/01\/brand-certera.svg","caption":"Certera"},"image":{"@id":"https:\/\/certera.com\/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/certeraLLC\/","https:\/\/x.com\/certera_llc","https:\/\/www.linkedin.com\/company\/certera-llc\/"]},{"@type":"Person","@id":"https:\/\/certera.com\/kb\/#\/schema\/person\/c25e1519e333a817f30c805384cba014","name":"certerakbdbuser","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","caption":"certerakbdbuser"},"sameAs":["https:\/\/certerakb.ssltoolsonline.com"],"url":"https:\/\/certera.com\/kb\/author\/certerakbdbuser\/"}]}},"_links":{"self":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/959","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/comments?post=959"}],"version-history":[{"count":9,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/959\/revisions"}],"predecessor-version":[{"id":2436,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/959\/revisions\/2436"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/media\/993"}],"wp:attachment":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/media?parent=959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/categories?post=959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/tags?post=959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}