Generating the Identity Server token signing certificate

Sitecore Identity Server requires a private key certificate to sign the tokens that are passed between the server and the clients. You must generate this certificate, Base64 encode it in string form, and store it as a Secret in the Kubernetes cluster.

The appendix Create the Identity Server token signing certificate contains a sample script that generates a self-signed certificate and prepares the string for use as a Secret.

The sample script creates the certificate and copies the certificate password to the sitecore-identitycertificatepassword.txt Kubernetes Secret text file.

You can mount the Identity Server certificate on the filesystem instead of passing it as an environment variable. For more information about how to mount the token signing certificate as a volume, see the Sitecore Docker Demo repository on GitHub.