RSA AM console certificate replacement

[HongyuZhang]

Hi all,

I am trying to replace the console certificate on my RSA AM 8.4. The RSA AM console has been using its default self-signed cert.

I have got the new certificate signed by my trusted CA and while importing, it is always complaining "This certificate is already imported.". 

I am guessing this is due to the fact that the default self-signed cert and the new certificate both have the same subject name (hostname for the RSA AM).

Am I doing anything wrong? Is there a way to get around this? 

Thanks,

Hongyu

[HongyuZhang]

By the way, I am following the instructions here: https://community.rsa.com/docs/DOC-77300 

[JayGuillette]

I think your replacement Cert is likely a bundle, it includes the Root CA, maybe an intermediary CA and the replacement console server cert,

and I would guess that previously either the Root CA or Intermediary was imported by itself,

so that is likely the cause of "This Certificate is already imported"

What you could do is look at your Console Certs listed in the Ops Console to see if you can find the Root CA or Intermediary CA or both already imported.  

If you are familiar with manipulating Cert Bundles, you can select just the server replacement cert from the Certificate Path Tab, the [View Certificate] to look at that as a single Cert.  Go to [Details] Tab and Save to file.  Call support for help, or have a look at 

https://community.rsa.com/docs/DOC-76462