We are currently trying to renew certificate for dlp web console.
We used the following documentation Create, sign, and import an SSL certificate signed by a Trusted Certificate Authority for the Enforce Server certificate (broadcom.com)
but ran into issues as we were unable to correctly apply the command
keytool -genkeypair -alias tomcat -keyalg RSA -keysize 2048 -validity 720
, OU=XXX, O=SYMANTEC, L=SANJOSE, ST=California, C=US" -ext SAN=DNS:
.keystore -storepass XXXXXXXX
As we could not determine what was being referred to as IPAddress- DNS IP or Server IP as well as FQDN-DNS FQDN or Server FQDN
We would like to receive support
Release : 16.0
Configuration issue in terms of the certificate on the environment
To further clarify for the enforce console and enforce FQDN is "dlp.abc.com" and it's IP is <10.0.0.0> then this look good.
Hope this helps answer your question.