Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a scenario where I need to run an application through hardware HTTPS load balancing that does round-robin. Clients will authenticate through pre-issued certificates from a standalone root CA that are one-to-one mapped via IIS. The clients are not AD authenticated only certificate.

My questions are:

Assumption is the same base-64 cert can be used on both IIS7.5 servers? Is there any way to 'share' a central certificate repository like Apache for multiple web servers?

If the user initiates connection to node 1, HLB points them to node 2 on a refresh, will they be required to authenticate again by selecting a certificate in their browser?

There is most likely an issue with ASP session state which will be handled through SQL, will this also be required for one-to-one mapping? Does ASP hold any session state information at the client certificate level or is this a one off handshake type function?

Any help greatly appreciated.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.