If I purchase a SSL Certificate for my domain and if I have three web
servers do I have to purchase different certs for the different boxes
or can I purchase one SSL cert then export it to the other two
computers?
Thanks
If it is the same common name and those three web server are serving the
same URL inside NLB cluster, then answer is 'yes'.
if not you will get prompt that the URL name and cert common name not
matching error msgs.
--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/
"bsmith95610"
news:1182811867.333656.312190@m37g2000prh.googlegroups.com.. .
> If I purchase a SSL Certificate for my domain and if I have three web
> servers do I have to purchase different certs for the different boxes
> or can I purchase one SSL cert then export it to the other two
> computers?
>
> Thanks
>
On Jun 25, 4:51 pm, bsmith95610
> If I purchase a SSL Certificate for my domain and if I have three web
> servers do I have to purchase different certs for the different boxes
> or can I purchase oneSSL certthen export it to the other two
> computers?
>
> Thanks
It might not be relevant for your situation but keep in mind that you
need to have a server license for each server that you use the
certificate on if you purchased the certificate from a certificate
authority. Of course, probably no one will find out it you don't.
Here are some instructions for exporting and importing if you're not
sure how to do it:
Exporting and Importing in Windows IIS Server
Exporting/Backing up your Certificate/Private Key in IIS (.pfx file
format)
1.) Start > Run
2.) Type in MMC and click OK
3.) Go into the File Tab > select Add/Remove Snap-in...
4.) Click on Add > Double Click on Certificates and click on Add > OK
5.) Select Computer Account
6.) Select Local Computer
7.) Click the + to Expand the Certificates Console Tree
8.) Look for the Personal directory/folder and expand Certificates.
9.) Right Click on the Certificate you would like to backup and choose
> ALL TASKS > Export
10.) Follow the Certificate Export Wizard to backup your certificate
to a .pfx file
11.) Choose to 'Yes, export the private key'
12.) Choose to include all certificates in certificate path if
possible. (do NOT select the delete Private Key option)
13.) Leave default settings > Enter Password (if required)
14.) Choose to save file on a set location
15.) Finish
16.) You will receive a message > Export Successful
17.) The .pfx file backup is now saved in the location you selected.
Importing your Certificate/Private Key in IIS (from .pfx file format)
1.) Start > Run
2.) Type in MMC and click GO
3.) Go into the Console Tab (or File) > select Add/Remove Snap-in
4.) Click on Add > Double Click on Certificates and click on Add > OK
5.) Select Computer Account
6.) Select Local Computer
7.) Click the + to Expand the Certificates Console Tree
8.) Right click on the Personal Certificates Store (folder)
9.) Choose > ALL TASKS > Import
10.) Follow the Certificate Import Wizard to import your Primary
Certificate from the .pfx file. When prompted, choose to automatically
place the certificates in the certificate stores based on the type of
the certificate.
11.) Close the MMC console. In the case that you are prompted, it is
not necessary to save the changes made to the MMC console.
12.) In your IIS manager, right-click on the site that you would like
to use the certificate and select properties.
13.) Click on the Directory Security Tab and hit the Server
Certificate Button. This will start the server certificate wizard.
14.) If you are asked what you want to do with the current certificate
on the site, choose to remove it, finish the wizard, and click the
server certificate button to run the wizard again.
15.) Choose to 'Assign an existing certificate' to the site and choose
the new certificate that you just imported.
16.) Finish the certificate wizard.
17.) Restart the server.
--
Regards,
Dan
http://www.sslshopper.com