Generating a private key and certificate signing request (CSR) lets you create a client certificate for secure communication with the vault.
The following example uses OpenSSL commands to generate an RSA private key and CSR:
openssl genrsa -out client_key.pem 4096 openssl req -out client.csr -new -key client_key.pem