# Generating SHA256‑signed certificates

Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/generating_sha256_signed_certificates.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/generating_sha256_signed_certificates.html)

Use the following OpenSSL commands to generate an RSA certificate. These commands use "foo" as an example name.

	
- Generate a private key. 

        openssl genrsa -des3 -out foo.key 2048Copy to clipboard
- Generate a self‑signed certificate.

        openssl req -new -key foo.key -outform DER -out foo.cer -x509 -days 365Copy to clipboard
- Remove the passphrase from the key. 

        mv foo.key foo.key.withpass 
        openssl rsa -in foo.key.withpass -out foo.keyCopy to clipboard
- Generate the digest of root certificate.

        openssl dgst -sha256 -out sha256rootcert.txt foo.cerCopy to clipboard

**Parent Topic:** [Generate secure images](https://docs.qualcomm.com/doc/80-Y8730-8/topic/generate_secure_images.html)

Last Published: Feb 10, 2026

[Previous Topic
SecImage configuration](https://docs.qualcomm.com/bundle/publicresource/80-Y8730-8/topics/secimage_configuration_file.md) [Next Topic
Build and flash signed image](https://docs.qualcomm.com/bundle/publicresource/80-Y8730-8/topics/build_and_flash_signed_image.md)