Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm talking to the Windows Azure support team and it seems that you cannot be assigned explicit static IP addresses. You 'happen' to get an IP address when you set things up, but there is no contractual guarantee on a specific IP adress (eg: always In case of a disaster (eg: datacenter natural calamity or accidental deletion of website deployment), you will lose these assigned IPs.

Now, it is my understanding that SSL certificates (for a web server) require a static IP address specified in the certificate binding the server to the certificate. Our setup is:

  1. Registrar: GoDaddy
  2. DNS : Amazon Web Services Route 53
  3. Hosting : Windows Azure Webrole ( and a worker role (

is it possible to have an SSL certificate bound only to the CNAME and not an IP address? How can I obtain such a certificate (is it a special class of SSL certs)? The best thing would be to have a single SSL cert for * (if possible!)

Appreciate the help!

share|improve this question

SSL certificates do not require a static IP. They are tied to a (list of) hostname(s) or wildcard(s), such as * Any SSL certificate vendor can sell you these. I use thawte and verisign myself but there are many more.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.