Use Different Certificates for the Engine and CM
You can use different certificates to secure the engine-to-CM connection and to secure the Jetty web server-to-CM connection.
This certificate distribution is illustrated below:

To replace a factory certificate with an engine and a CM certificate: