Setting up EC2 account and tools
Create AMI signing certificate
mkdir ~/.ec2
cd ~/.ec2
openssl genrsa des3 -out pk.pem 2048
openssl rsa in pk.pem out pkunencrypt-.pem
openssl req new -x509 -key pk.pem out cert.pem -days 1095
Share all three .pem files manually with group members
Troubleshooting: If your client date is wrong your certs will not work