Unable to generate certificates for a device in group enrollements - azure - azure

Question

I am following https://learn.microsoft.com/en-us/azure/iot-dps/tutorial-group-enrollments
this article to create a group enrollment and add devices to that. I have completed the first two steps i.e
prepare the environment
Create a device enrollment entry
While doing the simulate the device step. It is showing that
"{deviceName}-public.pem file and include this value as your Client Cert. Open your {deviceName}-all.pem file ".
I am not able to find the two .pem files. Where can I find these files and how to generate those files?
Can somebody please help me in solving this issue.
I am getting following error although I have set the path in System variable

Answer 1

In "prepare the environment" part, there is a step 4:
Use the following Certifcate Overview to create your test certificates.
you will create all the certificates you will need.
For device certificate created in this step:
Step 4 - Create a new device
Where can I find these files and how to generate those files?
If you use PowerShell and for example, use "x509devicetogroup" as the device name in the following command:
New-CACertsDevice x509devicetogroup
You will get the following certificates in your working folder:
Here x509devicetogroup-public.pem and x509devicetogroup-all.pem files are what you need.
Update:
If you get the following error when using PowerShell to create certificates:
openssl : The term 'openssl' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At D:\Sample\azure-iot-sdk-c\tools\CACertificates\ca-certs.ps1:367 char:5
+ openssl pkcs12 -in $newDevicePfxFileName -out $newDevicePemAllFil ...
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (openssl:String) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : CommandNotFoundException
Add a variable named "OPENSSL_CONF" to system environment variables:
Add a new system path variable points to OPENSSL bin directory like this: