If the listener uses the TERMINATED_HTTPS protocol, then one or more SSL certificates must be selected. The first certificate will be the default.

Use the key-manager service to create any certificate containers before creating the listener. The following documentation provides information on how to create a certificate container:

• Key Manager API Guide: Creating a Certificate Container
• Key Manager Service Command-Line Client