It appears that the setup utility now creates self-signed certificates in the alias directory, making the certutil instructions moot. Is that correct? My alias directory contains the following files: ------ $ cd /opt/fedora-ds/alias/ $ ls -la total 420 drwxr-xr-x 2 nobody nobody 4096 Feb 21 17:16 . drwxr-xr-x 15 root root 4096 Feb 21 16:57 .. -rw------- 1 nobody nobody 65536 Feb 21 17:16 admin-serv-roam104-178-cert8.db -rw------- 1 nobody nobody 16384 Feb 21 17:16 admin-serv-roam104-178-key3.db -rwxr-xr-x 1 root nobody 196340 Dec 8 11:04 libnssckbi.so -rw------- 1 nobody nobody 16384 Feb 21 16:57 secmod.db -rw------- 1 nobody nobody 65536 Feb 21 16:57 slapd-roam104-178-cert8.db -rw------- 1 nobody nobody 16384 Feb 21 16:57 slapd-roam104-178-key3.db ------ I didn't create any of these files myself. My problem is that no certificate shows up in the drop-down menu under Encryption in the Admin Server console. As you can see, my hostname has a dash in it. Could that be causing problems? Or do I need to use certutil manually? Thanks, Dan
