Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're building a web service that will be deployed on an IIS 7.5 farm, and secured through SSL, and also requiring client certs that will be mapped to Active Directory accounts.

My understanding is that the server cert needs to be generated for a specific server. If that is the case then we will need a server cert for each server in the farm. Because the farm will be load balanced, how do we generate client certs that will work with any of the servers in the farm?

share|improve this question
The last sentence make it unclear if you want information about client certs, server certs or both? – Bernie White Oct 22 '12 at 8:34
up vote 1 down vote accepted

Once you have the certificate successfully installed on the first server (the signed cert bound to your CSR). You can then just export the entire certificate and then import it into the remaining servers. There are a ton of existing resources online for the details on how to export and import certificates so I'll skip that here. But here is a link to another article on here to get you started if you need:

Can you import a SSL certificate from another Windows IIS

share|improve this answer
Also a wildcard cert would work as well – Jeremy Mar 20 '15 at 21:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.