---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create and configure the RSA key pair for the digital signature

# Create and configure the RSA key pair for the digital signature {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Create an RSA key pair that the proxy server can use to create the digital signature
for signing changes to the encryption properties and configuration.

## Vorbereitungen

Role required: admin

To generate and validate the digital signature, an RSA key pair must be generated and
stored in the JCEKS Java KeyStore and each proxy must be configured to use this key
pair. Generate an encryption key pair using the keytool command.

To use the keytool utility with a proxy installed on SElinux (CentOS), you must
enable loading of shared libraries from the proxy java-installation directory. To do
this, run the following command as root.  

    chcon -R -t texrel_shlib_t proxy_install_dir/java/jre /lib

You must use the Java 1.8 version of the keytool utility. A copy of the utility can
be found in \<proxy install dir\>java/jre/bin/keytool.

## Prozedur

1. Change to the KeyStore directory in the proxy download directory.
2. Change the default password.  
   The default password is changeme.

       keytool -keystore keystore.jceks -storetype jceks -storepasswd -new <newpassword>

3. Create an encryption key pair.  
   Hinweis:  
   Do not enter a password for the key when the keytool utility prompts for one.

   Enter this command on a single line.

       keytool -genkeypair -alias <key alias> -keyalg rsa -keystore keystore.jceks 
       -storetype jceks -storepass <keystore password> -keysize 2048

4. Update the encryption proxy property file (edgeencryption.properties).
   1. Change to the \<installation directory\>/conf/ directory.
   2. Open the edgeencryption.properties file.
   3. Enter the properties for the [digital signature](https://servicenow-prod.fluidtopics.net/11zZkc8NDA9UEYvX8O_edw "The edgeencryption.properties configuration file located in the <installation directory>/conf/ folder contains properties used to configure your environment.").  
      These properties must be the same for all proxies.
   {#t_SetUpAKeyPair__substeps_gsb_1t1_dt}
5. Save and close the edgeencryption.properties file.
**Vorheriges Thema:** [Install the Edge Encryption proxy server (command line installer)](https://servicenow-prod.fluidtopics.net/qlNaXt62CaWptBlxgoSRCg "Install an Edge Encryption proxy on a 64-bit Windows or Linux computer.")  
**Nächstes Thema:** [Import and configure the certificate for secure SSL connection](https://servicenow-prod.fluidtopics.net/a97b88eN3355v_NLmcOLwg "To use a secure SSL connection, import a server certificate and add it to the Java KeyStore.")