Setting up EC2 account and tools
Create AMI signing certificate
mkdir ~/.ec2
cd ~/.ec2
openssl genrsa -des3 -out pk-<group>.pem 2048
openssl rsa -in pk-<group>.pem -out pk-unencrypt-<group>.pem
openssl req -new -x509 -key pk-<group>.pem -out cert-<group>.pem -days 1095
Share all three .pem files manually with group members
Troubleshooting: If your client date is wrong your certs will not work