Rebex Buru SFTP Server documentation

Usage burusftpwa: certgen


burusftpwa certgen <filename> - Generates a self-signed X.509 certificate. The certificate can be used to enable TLS (HTTPS) for the Web Administration.

It is not recommended to use self-signed certificates on public servers.


The certgen command generates two files: <filename>.pfx and <filename>.crt. The <filename>.pfx file contains a certificate with an associated private key. The <filename>.crt file is a certificate only.


  • -p, --password <password>
    • Password for the created .pfx file. Default: empty password.
  • -t, --type (rsa|ecdsa)
    • Key algorithm. Default: rsa.
  • -b, --bits <bits>
    • Number of bits in the key to create. Default: 4096 for rsa, 521 for ecdsa.
  • -h, --hash (sha-256|sha-384|sha-512)
    • Signature hash algorithm. Default: sha-256.
  • -s, --subject <distinguished_name>
    • Subject of the certificate. Default: CN=localhost.
  • -m, --months <number>
    • Length of validity in months. Default: 12.
  • -a, --alt-hosts <names>
    • Comma-separated Subject Alternative Names (SAN). Optional.


  • burusftpwa certgen certfile

    • Generates an X.509 certificate with a 4096-bit RSA key and SHA-256, issued for localhost, valid for the next year, and saves it to certfile.pfx and certfile.crt files.
  • burusftpwa certgen -t ecdsa -b 384 -h sha-384 -s "" -m 120 -a "," certfile

    • Generates an X.509 certificate with an ECDSA NIST P-384 key and SHA-384, issued for, valid for the next 10 years, and saves it to certfile.pfx and certfile.crt files.

What next?


Download fully functional free 30-day trial.

Free download

Non-commercial use

Get a free non-commercial license. It includes most of the features of Professional edition.

Get free license

Commercial use

If you use the server for anything related to business or commercial use you have to purchase a license.

Sales contact

Buy a license

Get help

The server is completely free for personal, academy and other non-commercial use.

Technical support