---
title: "Generating Certificates with OpenSSL"
slug: "generating-certificates-with-openssl"
description: "Learn how self-signed certificates enable connections between Decisions and integration applications such as SSO, Kafka, and other modules."
updated: 2026-04-27T20:46:37Z
published: 2026-04-28T14:12:55Z
canonical: "documentation.decisions.com/generating-certificates-with-openssl"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Generating Certificates with OpenSSL

## Overview

A self-signed certificate allows users to make connections with various integration applications. Self-signed certificates are used in Decisions to make connections with SSO, Kafka, and other modules.

Prerequisite

- OpenSSL installed

## Example

The example below will demonstrate how to create a self-signed SSL certificate with pfx using OpenSSL.

1. In OpenSSL, generate a private key using the following command:  

```shell
openssl genrsa 2048 > private.pem
```
2. Generate the self-signed certificate using the following command:  

```shell
openssl req -x509 -days 1000 -new -key private.pem -out public.pem
```
3. Create the PFX using the following command:  

```shell
openSSL pkcs12 -export -in public.pem -inkey private.pem -out mycert.pfx
```

Creating PKCS#12To create a PKCS#12 file with the self-signed certificate and private key, use the following command:  

```powershell
openssl pkcs12 –export –out mycert.pfx –inkey key.pem –in mycert.pem
```