rsaadmin@am86p:~> cd /opt/rsa/am/utils
rsaadmin@am86p:/opt/rsa/am/utils> ./rsautil manage-ssl-cert --regen-internal-ca
Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: *********
Manage SSL Certificate Utility 8.6.0.0.0 (1423103)
(C) 1994-2021 RSA Security LLC or its affiliates.
All rights reserved.
Regenerating internal certificate authority and SSL
certificates...
Created backup of current keystores at:
/opt/rsa/am/server/security/JKS_BACKUP_173446763332069690
Command failed due to an unexpected error.
com.rsa.authmgr.radius.exception.RadiusSystemException: Unable to connect to RADIUS server within the given timeout
rsaadmin@am86p:/opt/rsa/am/utils>

The manage-ssl-cert program was trying to connect to the Steel-Belted RADIUS (SBR) server.

SecurID Authentication Manager 8.6 release notes at URL RSA SecurID Access Release Notes for RSA Authentication Manager 8.6mention that SecurID Authentication Manager 8.6 uses FreeRADIUS as the basis for the SecurID RADIUS server, instead of Steel-Belted RADIUS (SBR).
 

SecurID Authentication Manager 8.6 Patch 2 will address this issue.

Refer to the SecurID Product Advisories at URL Advisories for a notification on the release date of SecurID Authentication Manager 8.6 Patch 2.