Install Open SSL Tool and Generate Certificate

SAML setup requires the generation of a certificate with public and private key. Use openssl tool for this generation.

To install openssl tool on a windows machine, follow these steps:

Note: Admin can skip this section if openssl tool is already installed.

1. Go to below link and download Win64 OpenSSL v1.1.1a Light by clicking on EXE link.

https://slproweb.com/products/Win32OpenSSL.html

2. Double-click OpenSSL file using default settings to complete the installation.

3. Go to Location where OpenSSL is installed.

Example: C:\Program Files\OpenSSL-Win64

4. Press CTRL+Right Mouse button to launch Command prompt.

5. Type the following command in the prompt and press Enter:
set OPENSSL_CONF=c:\OpenSSL-Win32\bin\openssl.cfg

6. Restart the computer.

Note: This step is mandatory.

7. Go to Location where OpenSSL is installed and open bin folder and launch openssl application.

Generate Certificate

To generate certificate, follow these steps:

1. Run below commands in Command prompt:

a. req -x509 -nodes -sha256 -days 2048 -subj "/CN=suremdm.42gears.com" -newkey rsa:2048 -keyout "ssocert.key" -out "ssocert.crt"

b. pkcs12 -export -in "ssocert.crt" -inkey ssocert.key -CSP "Microsoft Enhanced RSA and AES Cryptographic Provider" -out "ssocert.pfx" -password pass:{{YOURPASSWORD WIHTOUT BRACES}}

c. x509 -inform pem -in "ssocert.crt" -outform der -out "ssocert.cer"

Certificate will be generated and saved at path C:\Program Files\OpenSSL-Win64\bin. Ensure the below mentioned files are present here:
ssocert.pfx

ssocert.crt

ssocert.cer