From OpenEdge 13.1 onward, PAS for OpenEdge automatically generates a dedicated PAS for OpenEdge server certificate during installation when a Development (DEV) license is used in a non-FIPS environment. This certificate is generated based on the hostname of the machine where the installation takes place.

Manual Configuration Required

While the certificate file is generated automatically, additional manual steps are necessary for it to be used by the server.
  1. Update the keyalias setting in {Instance}/conf/catalina.properties by changing its value from testserver to pasoetestcert.
  2. Install the OpenEdge CA root certificate into the operating system trust store, as this is required for proper certificate validation.

Locating the Root CA Certificate

As the dedicated certificate is generated dynamically based on the machine hostname, its hash name cannot be predicted in advance. To identify the correct root CA certificate, look for the most recent .cer file (by timestamp) in $DLC/certs/psccerts.zip—this is the root CA certificate corresponding to the dedicated generated certificate.

You can verify you have the correct certificate by opening it and inspecting the Issued To field. It should display PASOE Dev RootCA-followed by the hostname of the machine where the installation was performed.

On Windows, install this certificate into the Windows OS trust store. On Linux, the most recent .0 file in $DLC/certs points to the corresponding PEM file for the root CA certificate.

For reference, the CA root certificate associated with the original testserver alias is identified by the hash 37135ddd and can be found in both $DLC/certs/psccerts.zip and $DLC/certs.

Important: Production Usage

The auto-generated dedicated PAS for OpenEdge server certificate is intended strictly for development use only, consistent with other OpenEdge test certificates. It must not be used in production environments. For production deployments, obtain a valid server certificate from a trusted Certificate Authority (CA) and update the PAS for OpenEdge server configuration accordingly.