After an upgrade, if users cannot log in to the access protected resources, and the failure messages contain certificate error messages, manually push the certificates from Administration Console to Access Gateway.
To re-push a certificate:
For a reverse proxy certificate, go to the Reverse Proxy page, select a different certificate, click OK, return to the Reverse Proxy page, select the correct certificate, then click OK.
For a web server certificate, go to the Web Server page, select a different SSL mutual certificate, click OK, return to the Web Server page, select the correct certificate, click OK, then apply the changes.