New answers tagged ssl
The com.apple.servermgrd certificate is only used to create a SSL connection from Server.App to the server backend admin daemon. It is safe to delete as it will be recreated. You should delete the cert with the following commands: sudo security set-identity-preference -n -s com.apple.servermgrd /Library/Keychains/System.keychain sudo security ...
The OD server on 10.10 uses the identity certificate pointed to by the "MACHINE_IDENTITY" identity preference. Using Keychain Access or the security command line tool change the identity preference to point to your new CA signed cert.
One thing to check, if jaume's procedure is still not working for you. Look at the access control list for the identity certificate that you want servermgrd to use. Make sure that the servermgrd binary is on the list. In later versions, the process listening on port 311 is called servermgr-listener so you may need to add that binary to the ACL as well.
Top 50 recent answers are included