Guide

How to Generate an RSA Key Pair in PEM Format

Generate the corresponding RSA public and private key pair, then use the two returned PEM text blocks separately. The optional size starts at 2048 and also accepts 3072 or 4096.

Tool RSA Key Generator

Understand the two PEM outputs

An RSA key pair contains a public key and a private key that are generated together. This tool returns both parts as PEM-encoded text, a representation accepted by applications that support PEM key material. The optional key-size setting starts at 2048, and 3072 or 4096 are supported alternatives.

Use the generator when a configuration, test service, or other compatible workflow asks for an RSA pair in PEM form. First check the receiving system's requirements, especially its accepted key size and expected text format. Keep the public and private outputs clearly distinguished because they serve different roles. The private-key PEM is produced without encryption, so review how the destination expects that value to be protected before placing it into a configuration.

The tool creates key material; it does not provide a complete cryptographic workflow. The reviewed capability does not establish encryption, decryption, signing, verification, or key storage. Treat those functions as separate requirements when assessing what your application needs.

Generate and separate the key material

  1. Open the RSA Key Generator and locate the optional key-size control.
  2. Check the requirement supplied by the receiving application. Leave the control at 2048 when that size is suitable, or select 3072 or 4096 when the application specifies one of them.
  3. Confirm that the selected value is exactly 2048, 3072, or 4096. A different requested value causes generation to fail instead of being changed to a supported size.
  4. Start the generation operation.
  5. After a successful result appears, identify the separate public-key PEM and private-key PEM outputs.
  6. Copy the public text and private text into distinct, clearly labeled destinations. Preserve each returned PEM block, including its labels and line structure, unless the receiving application documents another required format.
  7. Compare the copied blocks with the displayed outputs so that neither section is truncated or mixed with the other.
  8. Handle the private-key text according to the destination system's protection requirements. Because this PEM is unencrypted, do not treat it like material intended for public distribution.

If generation fails, review the requested size before changing anything else. Replace an invalid value with 2048, 3072, or 4096, then run the generation again.

Check what the result means

A successful result has two related PEM-encoded text values: one public key and one private key. Their correspondence means they were generated as a pair, but the two blocks should still remain separately labeled when you copy or configure them. The public output is not a substitute for the private output, and the private output is not suitable for casual sharing.

The chosen size describes the RSA pair produced by the operation. When the optional control remains unchanged, the size is 2048. The other supported choices are 3072 and 4096; a value outside those choices indicates an invalid request and leads to generation failure. The generated RSA keys use public exponent 65537, which is part of the returned key material rather than a value you enter.

The private-key PEM has no encryption applied by this tool. Any additional protection therefore belongs to the system where the private text is used. The available behavior confirms pair creation and PEM output only, so it does not tell you that the result performs another cryptographic function or that keys are stored for later retrieval.

Worked example

A developer is preparing a test service that specifies a 3072-bit RSA key pair in PEM format.

Select 3072, start generation, and copy each returned block into its own labeled field for the test service configuration. Check that both blocks remain complete and distinct.

A successful result contains two separate PEM-encoded text blocks, with one identified as the public key and the other identified as the private key.

Limitations

  • The private-key PEM is returned without encryption, and generation does not accept a requested size outside 2048, 3072, or 4096.
  • The described capability is limited to producing an RSA pair in PEM text; other cryptographic operations and key storage are not established.

Common errors

  • Generation fails when the requested size is outside 2048, 3072, and 4096. Select one supported value, confirm it, and start the operation again.

FAQ

Which RSA key sizes are supported?

The control starts at 2048. You can choose 3072 or 4096 when the receiving system requires one of those sizes; another requested value causes generation to fail.

What will the generator return?

A successful result contains separate PEM-encoded text for the public key and private key. The private-key PEM is unencrypted, so apply the receiving system's handling requirements before using it.

What functions does the result cover?

The reviewed capability covers creating the RSA pair and returning PEM text. It does not establish encryption, decryption, signing, verification, or key storage.

Tool

RSA Key Generator