Skip to main content

Creating a EU HUB Certificates CSR and PFX Using OpenSSL

How to create EU HUB certificates (CSR, .cer and PFX files)

L
Written by Lorenzo Mari
Updated yesterday

Prerequisites

Step 1 — Run OpenSSL as Administrator

  1. Navigate to the installation folder:
    Default path:

    C:\Program Files\OpenSSL-Win64\bin

  2. Right-click on OpenSSL.exe and select Run as administrator.

If this does not work:

  • Open Command Prompt (CMD) from the Windows search bar.

  • Right-click and select Run as administrator.

  • Then navigate to the OpenSSL bin directory:

    cd "C:\Program Files\OpenSSL-Win64\bin"

(If OpenSSL is installed elsewhere, adjust the path accordingly.)

Step 2 — Create a CSR File

In the OpenSSL application (running as administrator inside the bin folder), enter the following command:

req -new -newkey rsa:2048 -sha256 -nodes -out XXXX.csr -keyout XXXX.key

  • This creates two files inside the bin folder:

    • XXXX.csr (Certificate Signing Request)

    • XXXX.key (Private Key)

Step 3 — Create the private CER Certificate from the P7B

After you have:

  • Uploaded the CSR

  • Downloaded the P7B and public CER certificates from the portal

  • Placed the .P7B certificate file in the bin folder

Run:

pkcs7 -print_certs -in XXXX.P7B -out XXXX.cer

  • This will create a XXXX.cer file inside the bin folder.

(Note: The certificate filename may differ depending on the environment, e.g. certificate-IQEHub.P7B.)

Step 4 — Create the PFX File

Finally, run:

pkcs12 -export -in XXXX.cer -inkey XXXX.key -out XXXX.pfx

  • This creates the XXXX.pfx file inside the bin folder.

Important Notes

  • Replace XXXX with your chosen name, keeping it consistent across all commands.

    • For example, if you name the .key file EMVO.key, you must also use EMVO.key in the final command.

Need Help?

If you need further clarification or assistance, please contact the EMVO Service Desk at:
📧 helpdesk@emvo-medicines.eu

Did this answer your question?