9.3. 生成密钥和证书

流程

1. 在 /etc/fdo 目录中生成密钥和证书：

   $ for i in "diun" "manufacturer" "device-ca" "owner"; do fdo-admin-tool generate-key-and-cert $i; done
   $ ls keys
   device_ca_cert.pem device_ca_key.der diun_cert.pem diun_key.der manufacturer_cert.pem manufacturer_key.der owner_cert.pem owner_key.der

   Copy to Clipboard Toggle word wrap

2. 检查在 /etc/fdo/keys 目录中创建的密钥和证书：

   $ tree keys

   Copy to Clipboard Toggle word wrap

   您可以看到以下输出：

   - device_ca_cert.pem
   - device_ca_key.der
   - diun_cert.pem
   - diun_key.dre
   - manufacturer_cert.pem
   - manufacturer_key.der
   - owner_cert.pem
   - owner_key.pem

   Copy to Clipboard Toggle word wrap