As the Authentication server is deployed under the WebAppPlatform, see related information regarding HTTPS/SSL management on Changing SSL certificates.
Deployment on cluster
If the WebAppPlatform (with the Authentication server inside of it) is deployed on a cluster, all service instances should use the same keystore. When using an automatically created keystore with a self-signed certificate, just copy the keystore file from one instance to all the other ones.