GenerateIssuerKey invokes Idemix library to generate an issuer (CA) signing key pair currently two attributes are supported by the issuer: AttributeNameOU is the organization unit name AttributeNameRole is the role (member or admin) name Generated keys are serialized to bytes.

GenerateMSPConfig creates a new MSP config If the new MSP config contains a signer then it generates a fresh user secret and issues a credential with two attributes (described above) using the CA's key pair from the file If the new MSP config does not contain a signer (meaning it is used only for verification) then only a public key of the CA (issuer) is added to the MSP config (besides the name).