# Web UI

You can generate your STIR/SHAKEN certificate through the Peeringhub.io web portal, which is the easiest way to do so.

To complete this process, follow these two steps:

1. **Generate your private key**
2. **Generate your certificate**

Both steps can be accomplished via the Web UI at <http://portal.peeringhub.io>.

#### Step 1: Generate a Private Key

To generate your private key:

* Navigate to the **STIR/SHAKEN Certificate** section.
* Click on **Private Key**.
* Then, click the **"Create New"** button in the top-right corner to generate a new private key.

<figure><img src="/files/8rYu0zenffOaONPFoprL" alt=""><figcaption></figcaption></figure>

You can generate as many private keys as needed. When creating a STIR/SHAKEN certificate, you can select one of your previously generated private keys.

To download a private key, simply click on the **Download** icon next to it. You will need these private keys to sign your calls.

<figure><img src="/files/xWEUt9RVFRh9hsdtYeMz" alt=""><figcaption></figcaption></figure>

#### Step 2: Generate a STIR/SHAKEN Certificate

To generate your STIR/SHAKEN certificate:

1. Navigate to the **STIR/SHAKEN Certificate** section.
2. Click the **"Create New"** button in the top-right corner.

<figure><img src="/files/wfTJVdSVs9FsGPpOhdRV" alt=""><figcaption></figcaption></figure>

* A pop-up window will appear, allowing you to select a private key for your STIR/SHAKEN certificate. Additionally, you will need to enter your **iConnective** username and password.

<figure><img src="/files/4FYz8qYCvko9WqQKNFNc" alt=""><figcaption></figcaption></figure>

* Click the **"Generate Now"** button to create your certificate.

{% hint style="info" %}
Your STI-PA Username and Password should be albe to be login to <http://authenticateapp.iconectiv.com&#x20>;

If your **STI-PA** (Secure Telephone Identity Policy Administrator) username and password are invalid, you will be unable to generate a STIR/SHAKEN certificate. To ensure successful certificate generation, please verify that your STI-PA credentials are accurate and active. If you haven't registered with the STI-PA yet, you'll need to complete their registration process to obtain valid credentials.
{% endhint %}

#### Step 3: Obtain your Certificate URL

You can see all your generated Stir/Shaken Certificate.  Under CR URL, you can use it to sign call with. &#x20;

<figure><img src="/files/K9tvVqajjOErkmCaPFqM" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://doc.peeringhub.io/guides/generating-certificate/web-ui.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.