Hopefully a very simple question, if I wanted several servers providing the same service to hold a certificate (e.g interface.internal.org) would the procedure be;
- Generate Public/Private Pair on one web server
- Generate CSR and receive Certificate
- Copy Private/Public Key Pair and Certificate to each server
Although there is the potential to place certificates at the load balancing layer, I wanted to investigate other ways - plus the servers have SSL accelerators so performance isn't really a factor.