The article explains how to install the CA certificate properly on the JSA system.

Procedure:

Edit the /opt/qradar/ca/conf.d/httpd.json file and set the CertSkip property to true and the CertMonitorThreshold property to 0. For example:

{
  "ServiceName": "httpd",
  "CertDir": "/etc/httpd/conf/certs",
  "CertName": "cert",
  "ServiceCommand": "/opt/qradar/bin/install-ssl-cert.sh --deploy",
  "CASkip": "true",
  "CertSkip": "true",
  "CertMonitorThreshold": 0 
}

Once we receive the certificates from the CA, please follow the steps below to install the certificates on the console and managed host in the trust store:

/opt/qradar/support/all_servers.sh -k -p <CertificateFile> -r /etc/pki/ca-trust/source/anchors/

/opt/qradar/support/all_servers.sh -k update-ca-trust

Note: The all_servers.sh script will run the command on the console, and all managed hosts

Please run the below command on console to install the certificate:

/opt/qradar/bin/install-ssl-cert.sh

At the Path to Public Key File (SSLCertificateFile) prompt, enter the path to the Public Key File. For example:
/root/new.certs/cert.cert

At the Path to Private Key File (SSLCertificateKeyFile) prompt, enter the path to the Private Key File. For example:
/root/new.certs/qradar.key

If you are still facing the same issue, please contact JTAC for assistance