AEM Cloud Manager SSL certificate renewal fails after CNAME change
✨ This content is AI generated and could be inaccurate. Generative AI Terms
This article describes how to address failures when renewing SSL certificates and updating domain mappings in Adobe Experience Manager Cloud Manager after a CNAME change in the certificate.
Description description
Environment
- Adobe Experience Manager (AEM) Cloud Manager (all versions)
Symptoms
- Failure to import the renewed SSL certificate
- Errors when updating domain mappings to use the new certificate
- Uncertainty about whether to update an existing certificate record or create a new one
Cause
This issue occurs when a renewed SSL certificate contains a new CNAME, and an attempt is made to update an existing certificate record instead of creating a new one. Cloud Manager requires a new certificate record when the CNAME changes.
Resolution resolution
Follow the steps below to resolve the issue:
- Verify that the renewed SSL certificate contains the updated CNAME as expected.
- In Cloud Manager, navigate to the SSL certificate management section.
- Upload the renewed certificate as a new entry instead of updating the existing certificate record.
- Go to the domain mappings section in Cloud Manager.
- Update the domain mapping to point to the newly created SSL certificate.
- Confirm that the application is now using the new certificate and test access to ensure SSL is functioning correctly.
recommendation-more-help
experience-cloud-kcs-help-kbarticles