Setting the FQDN in the Server Certificate Subject
Overview
You can set the Fully Qualified Domain Name (FQDN) in the server certificate subject on the Server Certificate Stack page. After you save the setting, regenerate the server certificate stack so the new subject takes effect.
Instructions
Follow these steps to set the FQDN in the server certificate subject:
- Go to System Configuration > System Settings > Server Certificate Stack.
- Turn ON Use FQDN in subject (or Generate Custom Server Certificate if applicable).
- Enter the desired FQDN in the appropriate field.
- At the bottom of the page, click Save to apply the changes.
- Verify that a confirmation message appears at the top of the page indicating the changes have been saved.
- Click the Regenerate button in the Regenerate Server Certificate Stack section.
- When prompted by the pop-up window, select Yes to confirm regeneration.
- A green banner will appear at the top of the screen stating that the server certificate will be regenerated in a few minutes. The console logs you out of the user interface, and you must log in again.
- Wait a few minutes until the certificate is regenerated.

Important Notes
- If you are using FQDN in the subject and a self-signed certificate, you must reimport the self-signed certificate after regenerating the server certificate stack.
- If the server certificate is regenerated, the Deep Packet Inspection (DPI) certificate will also be regenerated. You must reimport the new DPI certificate on all Mac machines.
- MacOS users must proceed with caution when performing these steps. If you regenerate the server certificate stack and do not upload the new DPI certificate, Mac machines may lose internet access.
- Use the same FQDN that your Endpoint Protector clients and single sign-on (SSO) integrations use to reach the server.
- If you are still experiencing issues, reach out to Netwrix Support.