Which sort of errors do you get on trying to create a cert manually?

And did you check that your CA is still valid? Server self-provisioning obviously can't work if the CA is expired...

OES11 is very old and obsolete software!

Do you use imanager to validate or recreate the certificates?

You can try to delete the certificate objects from edir with imanager or Consoleone, and then recreate this with imanager

Don't forget to take a snapshot or backup before!

Hello Mathias, hello Greiner.

I know it´s pretty old and I wanted to update the System today to 2023 or 2024. 

I deleted the Objects several times and also the CA. I will not geting an error, it just won´t create new certificates. Even in iManager manually or in eh console by ndsconfig upgrade. The ca an the sas objects are recrated fine.

These are the result of ndsconfig:

Extending schema... Done
For more details view schema extension logfile: /var/opt/novell/eDirectory/log/schema.log

Configuring HTTP service... Done
Configuring LDAP service... Done
Configuring SNMP service... Done
Configuring SAS service... Done
Associating certificate with the NCP server object... INFO: Server is already associated with a certificate.
Done
Configuring NMAS service... Done
Configuring SecretStore...
INFO: SecretStore extensions have already been added to the server.Done
Configuring LDAP Server with default SSL CertificateDNS certificate...
INFO: LDAP Server is already associated with SSL CertificateDNS certificate.
Done
Triggering the 'External Reference Check' process... Done

The interessting thing is, that the eDir is working and ldap as well even it has an outdated certificate.

Best Peter

So you've deleted the "SSL CertificateDNS" for the server in question, ran "ndsconfig upgrade" and get the message "INFO: LDAP Server is already associated with SSL CertificateDNS certificate"? Is there a new eDir object for "SSL CertificateDNS"?

yes

And what are the start and end dates if this certificate and of the CA?

2017 to 2027 or with the new one to 2034

That's the CA. And what about "SSL CertificateDNS"?

the ssl original 2017 to 2019 and I have no new one. 

I've asked above "Is there a new eDir object for "SSL CertificateDNS"? And you've answered "yes"...