When the user console service is run for the first time, it will generate a self-signed certificate and key which will be put into /etc/eucalyptus-console/. If you do not want to have a certificate and key generated and would like to use your own, you can disable automatic generation of the certificate and key.
If you choose not to use the default SSL certificate and key, you must provide your own. For more information on generating self-signed SSL certificates, go to http://www.akadia.com/services/ssh_test_certificate.html.
For information on configuring SSL certificate and key paths for your own certificate and key, see Configuring SSL Certificate Paths.