title: Renewing IAM SSL Server Certificates
body: <p>I have been using IAM server certificates for some of my Elastic Beanstalk applications, but now its time to renew -- what is the correct process for replacing the current certificate with the updated cert?</p>
  
  <p>When I try repeating an upload using the same command as before:</p>
  
  <pre><code>aws iam upload-server-certificate --server-certificate-name foo.bar --certificate-body file://foobar.crt --private-key file://foobar.key --certificate-chain file://chain_bundle.crt
  </code></pre>
  
  <p>I receive:</p>
  
  <blockquote>
    <p>A client error (EntityAlreadyExists) occurred when calling the UploadServerCertificate operation: The Server Certificate with name <em>foo.bar</em> already exists.</p>
  </blockquote>
  
  <p>Is the best practice to simply upload using a <strong>DIFFERENT</strong> name then switch the load balancers to the new certificate?  This makes perfect sense - but I wanted to verify I'm following the <em>correct</em> approach.</p>
  
  <p><strong><em>EDIT 2015-03-30</em></strong></p>
  
  <p>I did successfully update my certificate using the technique above.  That is - I uploaded the new cert using the same technique as originally, but with a different name, then updated my applications to point to the new certificate.</p>
  
  <p>The question remains however, is this the correct approach?</p>