[JSA] Reverting to certificates generated by the QRadar local CA.

If you encounter issues with your certificate, such as an incorrect name or IP address, an expired certificate, or changes to the IP address or hostname on your console, follow these steps to generate certificates signed by the QRadar local certificate authority.

Procedure:

1. Back up the certificates that were previously installed but are not working.

Existing certificates are detected and reported when you run certificate generation, which can cause the generation process to stop. 

mkdir /root/backup.certs/

cp /etc/httpd/conf/certs/cert.* /root/backup.certs/

2.  Update the following items in the /opt/qradar/ca/conf.d/httpd.json file:

Set CertMonitorThreshold back to its original value. If the original value is not known, remove from the file so that the defaults are used.

Set CertSkip to false.

3. Run the /opt/qradar/ca/bin/install_qradar_ssl_cert.sh command to generate new certificates.