Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-08-07
Generate Public and Private Keys for Workday Live Data Query

Generate Public and Private Keys for Workday Live Data Query

Public and private keys are required when you configure Workday Live Data Query and client connector properties:
  • The x509 public key is required when you set up Live Data Query in Workday, specifically when you register the API Client for interacting with Workday.
  • The private key is required when you configure Workday connector properties in your client (such as DBeaver, Tableau, and Python).
Ensure that you keep the keys protected.

Running the OpenSSL Command

To generate the public and private key, run the
openssl
 command from the terminal of your choice.
To check if your machine has
openssl
, run this command and confirm it prints a version: 
openssl --version
If you’re using a Windows machine and you don’t have
openssl
, use the Windows Package Manager (winget) to install
openssl
. Example: 
winget install -e --id ShiningLight.OpenSSL
The
openssl
 command is pre-installed with the macOS.
This sample command generates the key in PEM format: 
openssl req -x509 -newkey rsa:2048 -keyout private-key.pem -out public-key.cert -sha256 -days 365 -nodes