How can I generate a new certificate for Enterprise Manager
Originally Published: 2010-12-10
Last Modified: 2023-09-22
Article Number
000051235
Issue
How can I generate a new certificate for Enterprise Manager

Enterprise Manager certificate has expired

Error in browser: "Peer's certificate has an invalid signature."


Error in browser: "(Error code: sec_error_bad_signature)"


Error in browser: "Secure Connection Failed"


Resolution

Change directory to:

 C:\PROGRA~2\RSA\ENTERP~1\etc

 Rename the existing tem-keystore

 Run this command:

 C:\PROGRA~2\RSA\jre\bin\java.exe -classpath C:\PROGRA~2\RSA\ENTERP~1\etc/emcerttool.jar com.rsa.dlp.tem.X509CertGenerator -selfcert -cn emserver.company.com -keystore tem-keystore -keypass tablusem -storepass tablusem -alias jetty -validity 365

Double check the value for ?cn, it should be the fqdn of the Enterprise Manager host.

You can verify the cert using this command:

keytool ?list ?keystore tem-keystore ?v