dsconsole task/KeyCert.java uses console security/CertificateDialog.java which assumes key/cert db live under sroot/alias and has a server-name- prefix. This code will have to be changed to pass in the name of the directory containing the instance specific key/cert db.
The CGI code will be changed to accept a securitydir CGI parameter which will be the security directory name.