The Certificate Server installation creates default Server Certificate objects.
SSL CertificateDNS - server_name
A certificate for each IP address configured on the server (IPAGxxx.xxx.xxx.xxx - server_name)
A certificate for each DNS name configured on the server (DNSAGwww.example.com - server_name)
NOTE:OpenText eDirectory does not automatically create SSL CertificateIP. SSL Certificate DNS contains all the IPs listed in the Subject Alternative Name. When you attempt to create or repair the default certificates using OpenText Identity Console, the SSL CertificateIP certificate is not created or repaired by default. However, the plug-in interface provides a check box that you can select to override the default behavior and force the creation/repair of the SSL CertificateIP certificate.
OpenText eDirectory 9.0 and above automatically creates ECDSA certificates if Organization CA has a ECDSA certificate.
If these certificates become corrupt or invalid for some reason, or if you just want to replace the existing default certificates, you can use the Create Default Server Certificates Wizard, as described in the following procedure:
Click Certificate Management > Default Certificates options from the landing page.
Select the server or servers that you want to create default certificates for, thenclick Next.
Select Yes if you want to overwrite the existing default server certificates or select No if you want to overwrite the existing default server certificates only if they are invalid.
(Single Server only) If you want to use the existing DNS address, select that option. If you want to use a different DNS address, select that option and specify the new DNS address.
(Single Server only) If you want to use the existing default IP address, select that option. If you want to use a different IP address, select that option and specify the new IP address.
Click Next.
Review the summary page, then click Finish.
If you want more control over the creation of the Server Certificate object, you can create the Server Certificate object manually. For more information, see Creating Server Certificate Objects.