Replaced default Web Tier certificate but old certificate is presented in RSA Authentication Manager 8.x

[#1]

Article Number

000011775

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x

Issue

The default Web Tier certificate was replaced, but the old default certificate is presented by the Web Tier.

The replacement certificate shows as active, and the default shows as inactive, but the default is the certificate that is presented by the Web Tier.
 

Resolution

1. In the Operations Console, click Deployment Configuration > Web-Tier Deployments > Manage Existing.
2. On the Web Tiers page, in the Status column, click Update for the web tier that you want to update.  If you do NOT see Update, switch back to the default certificate, and then to the new certificate:
3. In the Operations Console, click Deployment Configuration > Certificates > Virtual Host Certificate Management.
4. On the Virtual Host Certificate Management page, under Alias, click the name of the inactive Original Default certificate.
5. Click Activate.
6. On the Activate Certificate Confirmation page, review the details, and select Yes, make this the active default certificate.
7. Click Activate Certificate.  

Important:   Do NOT click Update yet.

8. Click Deployment Configuration > Certificates > Virtual Host Certificate Management.
9. In the Virtual Host Certificate Management page, under Alias, click the name of the new certificate.
10. Click Activate.
11. On the Activate Certificate Confirmation page, review the details, and select Yes, make this the active default certificate.
12. Click Activate Certificate.
13. In the Operations Console, click Deployment Configuration > Web-Tier Deployments > Manage Existing.
14. On the Web Tiers page, in the Status column, click Update for the web tier that you want to update.
15. When the update is complete, which may take up to 20 minutes, the Status column for the updated web tier displays as Online.