Error when importing wildcard certificates to RSA Authentication Manager 7.1 and 8.x

[#1]

Article Number

000016247

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 3.0, 7.1, 8.x

Issue

Activating a wildcard certificate fails with the following error:

The certificate subject name does not match the hostname of this solution. Select another certificate to activate.

Resolution

RSA Authentication Manager does not allow activating wildcard certificates, which are public key certificates that can be used with multiple subdomains of a domain. It is a requirement that the certificate must be issued with exact hostname of the Authentication Manager server.

Per page 176 of the RSA Authentication Manager 8.1 Administrator Guide:

To activate a secure socket layer (SSL) certificate, the certificate must have a subject field that contains a common name (CN) with a value equal to the fully qualified hostname (FQHN) of the instance you are administering.