3

I want to add same ssl certificate in two servers. They boath use same domain. In first server works ok but when i add certificate in second one everything is ok but when i close IIS and check back again in Server Certificates List certificate dissaper.

I google and read forums but i can not fins solution why certificate dissapears.

Improve this question

3 Answers 3

Reset to default
8

Maybe I'm missing something. In my understanding, an SSL cert is FQDN specific, not machine specific (although maybe there is a type of SSL certificate that is machine specific) and that you could export the cert from one server in pfx format and import it to another server, which is what I've done with my primary and standby Exchange servers for the past 5 years.

Improve this answer
4
  • if i export ssl certificate with private key and save it like .pfx and import it in mmc.exe then start working. Thx for idea.
    – senzacionale
    Aug 18, 2010 at 21:30
  • Glad to help. If anyone knows if I've gone wrong with this from a technical or EULA\Legal standpoint, please chime in.
    – joeqwerty
    Aug 18, 2010 at 21:32
  • I'm not aware of a cert that is machine specific - it can't be: It certifies the authenticity of the private key in combination with the FQDN. Once the private key is known to another machine, this machine can - under the same FQDN - operate with the same key and the same certificate without problems.
    – Olaf
    Aug 18, 2010 at 21:33
  • whoops - your comments crossed paths with mine. If your cert vendor has any restrictions on how to use their cert is a different thing. Nothing to answer here - look at the terms and conditions of your vendor that apply to your specific situation/contract
    – Olaf
    Aug 18, 2010 at 21:35
2

The SSL certificates that I've installed have all been machine specific, meaning the certificate is paired with the fully qualified domain namd FQDN. The certificate will only work on that specific server.

I believe you can purchase domain specific SSL certificates that will work on any computer inside a specific domain.

I would suggest checking to see if this is the issue you are having.

Improve this answer
2
  • Yes, you'll need a different certificate for each server or a wildcard (domain) certificate.
    – Kara Marfia
    Aug 18, 2010 at 20:54
  • Almost. The certificate will only work on the FQDN ( unless you get into wildcarding, etc.). Remember though, that more than one server can respond to requests for a FQDN. This is what clustering does -- many machines work together to fulfill requests for one hostname.
    – pboin
    Jan 25, 2011 at 13:52
1

Which version of IIS? Is it the same on both servers?

What format is your certificate saved in?

Are you trying to import it using the same procedure on both servers, or are you trying to export it from one server to the other?

Is this the only certificate you're using on both servers?

Do those servers only have one web site, or multiple ones?

Improve this answer
1
  • problem was with private key and format. Thx
    – senzacionale
    Aug 18, 2010 at 21:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .