secstorage.ssl.cert.domain = *.test.com

consoleproxy.url.domain = *.test.com

2.create the ca

#(umask 077; openssl genrsa -out private/cakey.pem 2048)

#openssl req -new -x509 -key -in private/cakey.pem -out cacert.pem -days 365

3.create the  ccp server key and crt

#Generate a new 2048-bit private key

openssl genrsa -des3 -out test.key 2048

#Generate a new certificate CSR

openssl req -new -key test.key -out test.csr

#Convert your private key format into PKCS#8 encrypted format

openssl pkcs8 -topk8 -in  test.key -out test.pkcs8.encrypted.key

#onvert your PKCS#8 encrypted private key into the PKCS#8 format that is compliant with

openssl pkcs8 -in test.pkcs8.encrypted.key -out test.pkcs8.key

#create the crt for the ccp

openssl ca -in test.csr -out test.crt -days 3650   

4.After the connsole proxy is UP, navigate to Infrastructure > SSL Certificate?Copy ROOT CA cacert.pem,  Server Certificate test.crt  , and Private Key  test.pkcs8.key and provide  domain name. example, test.com.After the successful upload of certificates, make sure System VM’s are up and running?

5.place Root CA and Intermediate CA to Trusted Root Certification Authority on the computer that you want to use for browsing. On Windows, import the certificates using Microsoft Management Console.

6.Upload the template from local ,but it can't work ?