When you upgrade the NSM Engine from any earlier version to 3.1, a new SSL certificate must be generated before the engine can start successfully. If the rcnsmengined script is invoked to start the Engine before a new certificate is created, the script generates a certificate that uses the default settings.