> [!CAUTION]
> **Caution:** This documentation covers Edge for Private Cloud 4.52.00, which is no longer supported. Google does not provide security patches, bug fixes, or technical support for this version. The current supported version is 4.54.00. See the [Edge for Private Cloud documentation](https://docs.apigee.com/private-cloud/latest/overview) for the current version, or [All versions](https://docs.apigee.com/private-cloud/versions) to compare releases.

Each node must have its own version of a local private key.

To create a private key for a node, execute the following command on each node:

```
openssl genrsa -out KEY_FILE KEY_SIZE
```

Where:

- <var translate="no">KEY_FILE</var> is the path to the key file you want to create.
- <var translate="no">KEY_SIZE</var> is the number of bytes for the key. Apigee recommends that you use either 4096 or 8192.

For example:

```
openssl genrsa -out local_key.pem 8192
```

This command creates an RSA private key file named `local_key.pem` which has no public
key component.

## Next Step


[1](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createpk)


[NEXT: (2) Create the signature config](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-createsig)


[3](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-buildreq)


[4](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-sign)


[5](https://docs.apigee.com/private-cloud/v4.52.00/mtls-certs-integrate)