Certificate commands are generated when you upgrade Administration Console. Ensure that they have completed successfully.
To determine whether a certificate command has failed, click Security > Command Status.
Note the destination trust store or keystore of the failed command.
Click Troubleshooting > Certificates.
The Certificates page displays all the keystores and trust stores configured for Access Manager.
Select the store, then click Re-push certificates.
This sends all assigned certificates to the store. You can re-push certificates multiple times without causing any problems.