For authenticating servers, you must acquire a certificate issued by the certificate authority (CA).
Fujitsu Enterprise Postgres supports X.509 standard PEM format files. If the certificate authority issues a file in DER format, use a tool such as the openssl command to convert the DER format file to PEM format.

The following provides an overview of the procedure. Refer to the procedure published by the public or independent certificate authority (CA) that provides the certificate file for details.

1. Create a server private key file

2. Disable the passphrase for the server private key file

3. Create a CSR (signing request for obtaining a server certificate) from the server private key file

4. Apply to the certificate authority (CA) for a server certificate

5. Obtain a server certificate file and a CA certificate file from the certificate authority (CA)

6. Store the server certificate file and the CA certificate file
   Note: If you lose or destroy the certificates, you will need to have them re-issued.

The above procedure enables you to prepare the following files:

• Server private key file

• Server certificate file

• CA certificate file