Jim,
The only problem with that idea (don't get me wrong, it's common sense and a good one) is that I seem to recall somewhere along the line in my two-year upgrade struggle with 6.2 and ECC (boy, 7.03 went a lot better!) I asked about using certs OTHER than the default and was told they either weren't supported or flat wouldn't work.
HP SUPPORT STAFF: Please confirm that recollection of mine or feel free to blow it out of the water. Whichever is accurate.
Ken