You can generate a self-signed certificate for a VMware Aria Operations for Logs Windows or Linux agent by using the OpenSSL tool.


Download the appropriate installer for OpenSSL from Use the downloaded OpenSSL installer to install it on Windows.


  1. Create a certificate folder in the path mentioned for ssl_ca_path in the liagent.ini file.
  2. Open the Command Prompt and run the following command.
    /etc/pki/tls/certs/ > openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out ca.pem

    OpenSSL prompts you to supply certificate properties, including country, organization, and so on.


Two files are created, key.pem and ca.pem.

  • key.pem is the private key.
  • ca.pem is a certificate signed by key.pem.