I use wildcard certificate from proper authority
This certificate is assigned to the server object that holds iPrint

Stop Apache & Tomcat5

RootCert.der is exported to the public & imported to tomcat with tckeygen

Restarting Apache & Tomcat 5

iPrint works a treat.

Reboot server, RootCert.der gets replaced in Public with Organizational CA
(something that I used previously - no idea where from) and iPrint does NOT
authenticate users any more

Go through the same procedure again & it works again... till server reboot

How to solve it once for all?