Hello,

This is the chapter on certificate renewal on the appliance:

https://www.netiq.com/documentation/advanced-authentication-64/server-administrator-guide/data/certificates.html

Is this what you are looking for or is it something else?

Thanks.

Regards,

Luciano Testa

Hi Luciano Testa 

    I try to use external certificate to replace it on [digital certificate] on 9443 appliance webconsole....the 443/9443 web console indeed replace...

But TCP9200/9300 vulnerabilities still exist. the information like below:

Hello, 

I see. I think you can try this instead:

1) To renew cert on port 9443 you can do it using SLAnalyzer:
Go to Tools->common appliance framework-> Reset appliance certificate.


2) For port 9200 you need renew it from Admin console->server options.

To download SLAnalyzer please go to:

https://portal.microfocus.com/s/article/KM000007063?language=en_US

Hope this helps.

Thanks.

Regards,

Luciano Testa

Thanks Luciano Testa 

     About 9443 , I use the SLAnalyzer to reset...it show success import...but I check from webconsole...the self sign certificate expired still original expire date (no update)

About TCP9200/9300 certificate, I check the certificate from admin console==>server option....

the certificate on [server options] not match the subject of sertificate from Nessus detected 

Hello,

Then please open a ticket with Technical Support.

It is the best way to work on this issue.

Let me know the ticket number so I can track it.

Thanks.

Regards,

Luciano Testa

Luciano Testa 

     Today, I have created a case , the number is 02918864-SSL Certificate renew

Wencheng