So our production zone is getting somewhat close to needing a CA cert remint. To test the process out I setup a dev zone with 2 primary servers. I destroyed one test server and recreated using the server config backups (just like what happened to a prod server a while back). Now when I try to remint the CA cert it works fine on server which was created and left alone, which is also the cert authority server for the zone. The rebuilt server fails the cert upgrade with error "Keystore was tampered with, or password was incorrect". Other then this error this rebuilt server works fine.