Unable to update SSL certificate for domain mapping with only one certificate in AEM Cloud Manager

This article explains a limitation in Adobe Experience Manager (AEM) Cloud Manager where you cannot update or reapply an SSL certificate to a domain mapping when only one certificate is available in the selection dropdown.

Description description

Environment

Adobe Experience Manager (AEM) Cloud Manager

Issue/Symptoms

  • When attempting to update the SSL certificate for a domain mapping, only one certificate appears in the selection dropdown.

  • The UI does not detect a change when you reselect the same certificate, preventing the renewed certificate from being pushed to the CDN.

  • Attempts to delete and re-add the domain mapping result in errors such as:

    • CDN setup failed
    • Domain already registered: Domain is in use in another domain mapping.
  • The domain mapping becomes stuck or remains in a ghost state, blocking further updates or redeployment.

Resolution resolution

Follow the steps to resolve the issue:

  1. In Cloud Manager, navigate to the Certificates tab and confirm that your renewed certificate is visible and valid.
  2. Go to Domain Mappings and attempt to edit the affected domain mapping.
  3. If the certificate dropdown shows only one option and does not allow you to reselect or reapply the certificate, note that this is a known UI limitation and there is no direct workaround in the UI.
  4. If you attempted to delete and re-add the domain mapping and now receive errors such as Domain already registered: Domain is in use in another domain mapping., the domain mapping may be stuck in a backend state that cannot be resolved through the UI.
  5. Collect details of the affected domain, error messages, and any relevant screenshots or HAR files.
  6. Contact Adobe Support and provide the collected information. Request assistance to clear the stuck domain mapping and enable you to re-add or update the mapping.

After Adobe Support confirms that the backend issue is resolved, verify that you can successfully update or re-add the domain mapping and that the renewed certificate is applied.

recommendation-more-help
experience-cloud-kcs-help-kbarticles