Dear Gluu support person, Im getting a certificate identity not verified error everytime i access my gluu server installation in a browser. I understand that this is because of the certificate not signed by a central CA. To get the corresponding CSR i looked into the server.xml file of the tomcat server that gluu uses and found that the corresponding keystore and certificates are under shibIDP.* under etc/certs. But I also see that there are other keystores and certificates. My question is 1) To avoid this error in the browser do I need to generate a csr that is similar to the existing one(shibIDP.csr), get this signed by a central CA and and import them into the corresponding key store? Do I need to replace files like shibIDP.csr, shibIDP.crt? What is the use of other keystore and crt files those are there in etc/certs?