| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="cloud-create-api-keypair">
|
|---|
| 4 | <title>Creating an API Signing Key Pair</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p/>
|
|---|
| 8 | <p>
|
|---|
| 9 | To use the cloud integration features of <ph conkeyref="vbox-conkeyref-phrases/product-name"/>, you
|
|---|
| 10 | must generate an API signing key pair that is used for API
|
|---|
| 11 | requests to <ph conkeyref="vbox-conkeyref-phrases/oci"/>.
|
|---|
| 12 | </p>
|
|---|
| 13 | <p>
|
|---|
| 14 | Your API requests are signed with your private key, and <ph conkeyref="vbox-conkeyref-phrases/oci"/>
|
|---|
| 15 | uses the public key to verify the authenticity of the request.
|
|---|
| 16 | You must upload the public key to the <ph conkeyref="vbox-conkeyref-phrases/oci"/> Console.
|
|---|
| 17 | </p>
|
|---|
| 18 | <note>
|
|---|
| 19 | <p>
|
|---|
| 20 | This key pair is not the same SSH key that you use to access
|
|---|
| 21 | compute instances on <ph conkeyref="vbox-conkeyref-phrases/oci"/>.
|
|---|
| 22 | </p>
|
|---|
| 23 | </note>
|
|---|
| 24 | <ol>
|
|---|
| 25 | <li>
|
|---|
| 26 | <p>
|
|---|
| 27 | (Optional) Create a <filepath>.oci</filepath> directory to
|
|---|
| 28 | store the key pair.
|
|---|
| 29 | </p>
|
|---|
| 30 | <pre xml:space="preserve">$ mkdir ~/.oci</pre>
|
|---|
| 31 | <p>
|
|---|
| 32 | The key pair is usually installed in the
|
|---|
| 33 | <filepath>.oci</filepath> folder in your home directory. For
|
|---|
| 34 | example, <filepath>~/.oci</filepath> on a Linux system.
|
|---|
| 35 | </p>
|
|---|
| 36 | </li>
|
|---|
| 37 | <li>
|
|---|
| 38 | <p>
|
|---|
| 39 | Generate the private key.
|
|---|
| 40 | </p>
|
|---|
| 41 | <p>
|
|---|
| 42 | Use the <codeph>openssl</codeph> command.
|
|---|
| 43 | </p>
|
|---|
| 44 | <ul>
|
|---|
| 45 | <li>
|
|---|
| 46 | <p>
|
|---|
| 47 | To generate a private key with a passphrase:
|
|---|
| 48 | </p>
|
|---|
| 49 | <pre xml:space="preserve">$ openssl genrsa -out ~/.oci/oci_api_key.pem -aes128 2048 </pre>
|
|---|
| 50 | </li>
|
|---|
| 51 | <li>
|
|---|
| 52 | <p>
|
|---|
| 53 | To generate a private key without a passphrase:
|
|---|
| 54 | </p>
|
|---|
| 55 | <pre xml:space="preserve">$ openssl genrsa -out ~/.oci/oci_api_key.pem 2048</pre>
|
|---|
| 56 | </li>
|
|---|
| 57 | </ul>
|
|---|
| 58 | </li>
|
|---|
| 59 | <li>
|
|---|
| 60 | <p>
|
|---|
| 61 | Change permissions for the private key.
|
|---|
| 62 | </p>
|
|---|
| 63 | <pre xml:space="preserve">$ chmod 600 ~/.oci/oci_api_key.pem</pre>
|
|---|
| 64 | <p>
|
|---|
| 65 | Generate the public key.
|
|---|
| 66 | </p>
|
|---|
| 67 | <pre xml:space="preserve">$ openssl rsa -pubout -in ~/.oci/oci_api_key.pem -out ~/.oci/oci_api_key_public.pem</pre>
|
|---|
| 68 | </li>
|
|---|
| 69 | </ol>
|
|---|
| 70 | </body>
|
|---|
| 71 |
|
|---|
| 72 | </topic>
|
|---|
