Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a scenario where I need to run an application through hardware HTTPS load balancing that does round-robin. Clients will authenticate through pre-issued certificates from a standalone root CA that are one-to-one mapped via IIS. The clients are not AD authenticated only certificate.

My questions are:

Assumption is the same base-64 cert can be used on both IIS7.5 servers? Is there any way to 'share' a central certificate repository like Apache for multiple web servers?

If the user initiates connection to node 1, HLB points them to node 2 on a refresh, will they be required to authenticate again by selecting a certificate in their browser?

There is most likely an issue with ASP session state which will be handled through SQL, will this also be required for one-to-one mapping? Does ASP hold any session state information at the client certificate level or is this a one off handshake type function?

Any help greatly appreciated.

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.