Services failed to restart after upgrade to 8.8 while using custom signed certificates
Last Modified: 2025-09-10
Article Number
Applies To
Authentication Manager Version 8.8
Issue
Services failed to restart after upgrade to 8.8 while using custom signed certificates.
Logs show: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: Netscape cert type does not permit use for SSL server
Example certificate:
Cause
Authentication Manager version 8.8 uses Java version 12. This error occurred because Java 12 no longer accepts the "Netscape cert type" extension.
Resolution
Use a certificate that doesn't use the netscape extension.
Workaround
Revert back to self signed certificate.
rsaadmin@am81p:~> cd /opt/rsa/am/utils rsaadmin@am81p:/opt/rsa/am/utils> ./rsautil reset-server-cert Please enter OC Administrator username: <enter Operations Console admin user name> Please enter OC Administrator password: <enter the password for the Operations Console user>
After the certificate is replaced, restart the Authentication Manager services:
rsaadmin@am81p:/opt/rsa/am/utils> cd ../server rsaadmin@am81p:/opt/rsa/am/server> ./rsaserv restart all
Related Articles
Authentication Manager 8.5 upgrade to 8.6 fails with error: Unactivated changes are present in the WebLogic Server config.xml 1.37KNumber of Views How to Upgrade Internal SHA-1 Certificates to SHA-256 in Authentication Manager Using rsautil 1.04KNumber of Views Applying patch or upgrade fails after hardening RSA Authentication Manager appliance 868Number of Views Authentication Manager 8.x upgrade fails with error "Failed to launch the update installer to apply the update" 587Number of Views RSA SecurID Appliance 3.0 hardware that can be upgraded to Authentication Manager 8.1 541Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA Governance & Lifecycle Generic Database Collector Guide RSA Authentication Manager 8.7 SP2 Administrator's Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager 8.9 Setup and Configuration Guide
Don't see what you're looking for?