When you generate a keypair it includes both public & private key.
Use the keypair name created earlier with the CSR generation command.
For example if you generate keypair named ubdkey.pem using the following command
crypto generate key 2048 ubdkey.pem
then use the same keypair in CSR generation command
crypto generate csr ubdkey.pem
HTH
Syed Iftekhar Ahmed