In order to access the Thirdfort API you are required to create a RSA key (2048 bit). The public portion of the RSA key should be extracted and shared with Thirdfort (via the form here).
The private portion of the key should be stored safely and securely and only made available to the application generating JSON Web Tokens.
Examples
❯ openssl genrsa -out key.pem 2048
Generating RSA private key, 2048 bit long modulus (2 primes)
........................................+++++
.............+++++
e is 65537 (0x010001)
❯ openssl rsa -in key.pem -pubout -out pubkey.crt
writing RSA key
❯ cat pubkey.crt
-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk6x1fqcodQboMbIEBXF
/yDvusAiMcVoUJAkZ47lGAsJSiOLLZDP+sDUa9RH18DYE6vdlqg3r6oikHnFGPR9
0wIYpdlcWJBCU2q4n1NQowlnrSVKnZ/QQ6l/FJUU+p6sM6LvjkSnYD6f5vchZsbE
ZiE8UURkax/7OyInwXGjzY8TJ83ZhQvSh8Idh9Ls8U7rFtJQjRV4BUUko3Xll1WW
6JONzYppJ9pJcYgOlH3upIrWl0bMma+A451m+x6uPcxy7piW0YDQw9GODWuZ2ye6
tc3j0x2IIdddAC6p8zg1vowRBia4GESdY7uoXceqiyLZhzA6WvLLzv1Mc1gW8xYK
SQIDAQAB
-----END PUBLIC KEY-----There are OpenSSL binaries that can be downloaded and used to generate RSA keys on Windows. See OpenSSLWiki - Binaries for information on pre-built binaries or OpenSSL - Downloads to compile from source.
A binary installation example can be found here.
C:\Users\username>openssl genrsa -out key.pem 2048
Generating RSA private key, 2048 bit long modulus (2 primes)
....................................................................+++++.+++++
e is 65537 (0x010001)
C:\Users\username>openssl rsa -in key.pem -pubout -out pubkey.crt
writing RSA key
C:\Users\username>type pubkey.crt
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEbu11claxYr0edJE0Fk
4KjK9IqIYiOsj+0rJMncqZ0wa0E+WPgmdHS9VSDzrplLmRHFgE8jMCNaE6LDOuIf
NfzgIsdl63camEc2kBqzolVwI9mrANs+CsqM4IFcyPjsjx/2WXtKy4Agj8uy+1DM
dMrLdizFnoNR9EeWlaqF/jZXKiZSr8LDw9wBidD4vNpCCSEkDcDzFgfhMdVUgxag
EB2kPgSpOJwWFJV50PuLx9fBtMeUyDTHRaSH97ac9vWTvXmSFZ4pCJUeGeEKUsY0
GbpDzRCRTPZZV2oo+emjAI7DI89ZWHpFluudZquu9YhVH17WLR47zvVLtMA0CawR
jwIDAQAB
-----END PUBLIC KEY-----