openssl genrsa -out private.key 2048

openssl x509 -x509toreq -in BMC.CA.crt -signkey private.key -out bmc-pve.csr