Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a production server with a wildcard SSL certificate. I'm in the process of creating a backup/failover server that will host the same domains, and therefore will also need the SSL certificate.

The certificate on the primary server was installed with the private key non-exportable, so I am unable to export the certificate for installation on the failover server.

My question then is - if I re-key the certificate from Go Daddy, does the original certificate installed on the primary server cease to be valid?

As an aside, the original (primary) server is IIS 6, the failover is IIS 7 (once the failover is operational, we'll likely upgrade the primary).

share|improve this question

2 Answers 2

up vote 3 down vote accepted

Rekeying a certificate revokes the original. See here for GoDaddy's support page on rekeying, and here for information on certificate revokation lists.

share|improve this answer
    
Thank you. I was under the impression that when a key was generated, the CSR process is computer-specific. If so, how does one install a SSL cert across 2 servers, such as my primary/failover scenario above? (should I post this as another question?) –  Matt Apr 28 '10 at 14:50
1  
@Matt: Yes that should be another question :) –  Zypher Apr 28 '10 at 15:15
2  
You can use a certificate for two servers, as long as it is valid for both of them (wildcard) –  fahadsadah Apr 28 '10 at 16:34

You should be OK with exporting the certificate from the primary server and importing it to the secondary server. This is what I do with my Exchange servers.

If any one sees a technical or legal issue with this, please let me know.

share|improve this answer
    
Exporting the certificate with the private key works great, but many SSL providers require a server license to be paid for each server the certificate is used on. GoDaddy has an unlimited server license though so exporting is the right answer in this case. –  Robert Apr 29 '10 at 15:28
    
@Robert: Thanks for the info. –  joeqwerty Apr 29 '10 at 16:20
    
From the question "with the private key non-exportable" so no exporting is going to happen. –  Ram Sep 20 '11 at 18:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.