> [!CAUTION]
> **Caution:** This documentation covers Edge for Private Cloud 4.52.00, which is no longer supported. Google does not provide security patches, bug fixes, or technical support for this version. The current supported version is 4.54.00. See the [Edge for Private Cloud documentation](https://docs.apigee.com/private-cloud/latest/overview) for the current version, or [All versions](https://docs.apigee.com/private-cloud/versions) to compare releases.

After you create a signature configuration file for your local private key, you can convert this
configuration into a signature request file.

To create a signature request file, execute the following command:

```
openssl req \
  -key LOCAL_PRIVATE_KEY \
  -config SIGNATURE_CONFIG_FILE \
  -new \
  -nodes \
  -days NUMBER_OF_DAYS \
  -out SIG_REQUEST_FILE
```

Where:

- <var translate="no">LOCAL_PRIVATE_KEY</var> is the path to the node's local private key that you created in [Step 1: Create the local private key](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createpk).
- <var translate="no">SIGNATURE_CONFIG_FILE</var> is the path to the node's file that you created in [Step 2: Create the local signature config file](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createsig).
- <var translate="no">NUMBER_OF_DAYS</var> is the number of days for which the certificate is good. The default is 30.
- <var translate="no">SIG_REQUEST_FILE</var> is the output location for the signature request file that this command creates.

This command creates a `*.csr` file with the name you specified.

## Next Step


[1](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createpk)


[2](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createsig)


[3](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-buildreq)


[NEXT: (4) Sign the request](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-sign)


[5](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-integrate)