Generating a self-signed TLS certificate

Third-party CA certificates are required to install HCL Local License Server (LLS) on your host machine. However, you can also use the LLS installer to generate a self-signed certificate.

About this task

The LLS installer supports trusted third-party CA certificates and self-signed certificates.

Important:

It is advised that you use a trusted third-party TLS certificate and skip this step.
Your usage model for LLS and your risk tolerance should be considered in your TLS certificate selection.
The use of a self-signed certificate comes with no warranties or liabilities.

Procedure

Extract the installer package:
- On Windows, use a zip program such as Winzip.
- On Linux, enter the following command:
```
tar -xvzf packageName
```
Go to the directory where the utility program is located.

For Windows

Name: utility.bat

Location:<unzipped-installer-files>\hcl-lls-5.2-windows\Application\Windows\utility.bat

For Linux

Name: utility.sh

Location:<unzipped-installer-files>/hcl-lls-5.2-linux/utility.sh

Example: <unzipped-installer-files> refers to the directory created after extracting the LLS installer package
Specify the configuration information as the utility program prompts.

Please choose what you want to do: 1. Generate TLS Certificate 2. Quit

Press 1 for generating a self-signed TLS certificate.
Enter FQDN (Fully Qualified Domain Name) (e.g. MYLLSSERVER.COM):

Type the FQDN hostname.
A Fully Qualified Domain Name (FQDN) is the complete address of a specific resource on the network. It includes host name, domain name, and any preceding sub-domains. You can obtain the FQDN host name on your respective OS as follows:
- On Windows, enter the following command:
  powershell "(Get-WmiObject win32_computersystem).Name + '.' + (Get-WmiObject win32_computersystem).Domain"
- On Linux, enter the following command:
  hostname -f
Enter Your Organization Name:

Type a name for the organization, such as HCL.

Enter Certificate Validity Period (days, default: 365):

Specify the validity period of the certificate in days. The default value is 365.

Enter the directory to store certificates:
Specify a location where you want to store the certificate. The following example message is displayed and indicates successful TLS certification generation:
```
Certificate request self-signature ok 
subject=c=US, ST=YourState, L=YourCity (Optional), O=HCL, CN=Local Licensing Server 

Default self-signed certificate generated successfully 
Certificate and key files are located in: C:\MHS\LLS\Certificate 

TLS certificate generation completed. 
Do you want to generate something else? 1. Generate TLS Certificate  2. Quit
```
Press 2 to quit the process.

Results

The self-signed certificate is generated and saved at the provided location.