Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a production machine running IIS6 with a wildcard SSL certificate. The certificate that was installed is not exportable.

We want to upgrade the system to IIS7. As part of this venture, we're creating a backup/failover server that will serve the exact same websites - when we take the primary down for upgrade, the secondary will take over. As such, the secondary also needs the SSL certificate.

However, since the certificate was not exportable, this means re-keying it from Go Daddy.

Per http://help.godaddy.com/article/867, I know that by re-keying the certificate the original will stop working.

I'm still pretty new to SSL certificates, so are there any problems I should anticipate when installing the same SSL certificate on 2 different machines?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

As long as the certificate is valid for both of them, you should be fine.

share|improve this answer
    
Please elaborate - under what circumstances would a certificate be valid for one machine, but not the other? –  Matt Apr 30 '10 at 15:13
    
A certificate contains a domain name, list of domain names, or wildcard domain name that it is valid for. For example, a certificate for alpha.domain.com cannot be used on beta.domain.com, but one for *.domain.com can be used on both. –  fahadsadah Apr 30 '10 at 15:43

I would re-key the certificate and install it on the secondary machine and make sure that it's exportable. Then, export the certificate and install it on the existing server. This ensures that they both have the same exact certificate in place. Keep a copy of the PFX export file in a safe place in case you need to restore it again later.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.