"This action also modifies certificate chain for the following keys" is displayed when try to update the key

Products

• CA API Gateway

Issue/Introduction

When tries to import the .pfx file to update the existing private keys which is going to expire, the policy manager pop up a window, shows the warning message "This action also modifies certificate chain for the following keys", and lists some private keys.

You may wonder what is that mean and how it impact the those listed keys.

Resolution

The reason of the warning message "This action also modifies certificate chain for the following keys" is that, all the listed private keys are using the same intermediate/root certificatein their certificate chain. 

Replacing the certificate chain of new key will replace the same intermediate/root certificates for those listed keys.

It usually will not cause issues. But in rare cases it may. (for example, the intermediate certificate was renewed)

That's why a warning message is popup for customer admin to be aware of those impacted keys.

Therefore, after renew the key the certificate chain, besides verifying the renewed key,  those listed keys should be verified as well.

In case any of the listed keys is not working, which means its certificate chain is not valid anymore, then this key needs to be renew as well.