Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

If I buy a Wildcard SSL Certificate for one domain, like: domain.com and I have 40 sites, like apples.domain.com and pears.domain.com

All the sites are on the same IIS 7 server

Does each site need a unique IP address?

If yes, is there anyway around it?

share|improve this question

3 Answers 3

up vote 2 down vote accepted

No, they do not need to be on unique IP addresses.

Navigate to C:\Windows\System32\Inetsrv\ In the Inetsrv folder, run the following command for each of the other websites on the IP address that need to use the certificate:

appcmd set site /site.name:"{IISSiteName}" /+bindings.[protocol='https',bindingInformation='*:443:{hostHeaderValue}']

Replace {IISSiteName} with the name of the IIS site and {hostHeaderValue} with the host header for that site e.g. site.mydomain.com

share|improve this answer
    
wow, the text editor approach is a bit scary. There's got to be a nice GUI way?? –  aron Sep 3 '10 at 18:58
    
IIS 7.5 on Windows 2008 R2 allows you to handle this in the GUI. Just select the wildcard certificate and the host header input field will allow you to specify the header you want. –  Dscoduc Sep 4 '10 at 6:34
    
Well since you specified IIS 7, you're going to have to resort to the command line to modify the metabase. AFAIK there is now way to modify things properly in the GUI. No clue about II 7.5. –  Tatas Sep 6 '10 at 17:54
    
I tried this solution, it did not work. I still got the error about the site using the same port as an existing site. –  aron Sep 9 '10 at 2:54
    
Dscoduc - are you sure? I'm in iis 7.5 and the host header textbox is disabled after you select "https" –  aron Sep 9 '10 at 3:02

Since this is a wildcard cert, you only need one IP for all of these domains. HOWEVER, if you add a new domain, eg: example.com, and want to do HTTPS on that, then you will need a new IP. But, any subdomains for domain.com will properly be verified by the wildcard cert.

share|improve this answer

No you donn't need separate ip address for each sub domains. You can secure UNLIMITED sub domains on single ip address with wildcard ssl certificate. Below link help to setting up wildcard ssl certificate : http://www.clickssl.com/blog/how-to-install-wildcard-ssl-certificate-in-iis-7/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.