This topic explains how to create self-signed TLS certificates for use in an environment configuration. This information is intended for trial or testing purposes only.
The runtime ingress gateway (the gateway that handles API proxy traffic) requires a TLS certificate/key pair. For this quickstart installation, you can use self-signed credentials. In the following steps, openssl is used to generate the credentials.
Navigate to your HELM_CHARTS_HOME/apigee-virtualhost/ chart directory and execute the following command to create the certificate and key files. The certificate files will most likely have .crt or .pem extensions and the key file will most likely have .key.
This command creates a self-signed certificate/key pair that you can use for the quickstart installation. The CN mydomain.net can be any value you wish for the self-signed credentials.
Check to make sure the files are in the ./certs directory:
ls ./certs
keystore.pem
keystore.key
Where keystore.pem is the self-signed TLS certificate file and keystore.key is the key file.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-23 UTC."],[[["This guide details the creation of self-signed TLS certificates for trial or testing environments."],["Self-signed certificates are not recommended for production and should be used only for development, trials, or testing."],["The runtime ingress gateway requires a TLS certificate/key pair, which can be self-signed for quickstart installations."],["OpenSSL is used to generate the certificate and key files, with the provided command creating a pair that can be used immediately."],["The generated certificate and key files, typically with `.crt` or `.pem` and `.key` extensions respectively, should be stored in the `HELM_CHARTS_HOME/apigee-virtualhost/` directory."]]],[]]