When a certificate is replaced on the primary Administration Console, the eDirectory certificate is updated but not pushed automatically to the secondary Administration Console. To fix this issue, re-push the Administration Console Keystore certificates from eDirectory to the secondary Administration Console:
Log in to the secondary Administration Console.
Click Troubleshooting > Certificates.
Select Administration Console Keystore, then click Re-push certificates.
Restart Administration Console.