Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

few questions, I am moving to another hosting provider.

  1. In IIS, when I create the request CSR, do i have to enter the EXACT same information for it to work with the response certificate I got via email from geotrust?

  2. if I have a load balancer, with 2 front end servers, can I install the certificate on both boxes or I have to buy a special certificate for that?

share|improve this question
1  
Are you moving a server, or just content? Same domain name? If it is the same domain, you can use the existing cert. –  DanBig Dec 8 '09 at 20:56
    
same domain, different server (ISP). –  user2659 Dec 8 '09 at 21:18

1 Answer 1

up vote 3 down vote accepted

If you're not changing your domain name, just export your certificate and the private key from your current server and import it into the new server. (That procedure assumes you're exporting a user certificate. For your web site, choose "Computer Account" when opening the management console snap-in.)

Assuming your load balancer is doing SSL offload you can load your certificate and private key into the load balancer, as well. Export the certificate and private key and import them into your load balancer per the manufacturer's procedure for key import.

share|improve this answer
    
I don't have access to the load balancer, its in a shared enviro. –  user2659 Dec 8 '09 at 21:18
    
Then you don't want the load balancer doing SSL offload, because it'll have your private key. Hopefully the load balancer is SSL-aware and can keep user sessions sticky w/ respect to the given server the SSL session starts on. (Most are, though, so you should be fine). Load the private key and certificate on all your web servers and do SSL on the web servers. –  Evan Anderson Dec 8 '09 at 21:26
    
Also see sslshopper.com/… for clear export/import instructions. –  Robert Dec 10 '09 at 3:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.