4

We have a production server with a wildcard SSL certificate. I'm in the process of creating a backup/failover server that will host the same domains, and therefore will also need the SSL certificate.

The certificate on the primary server was installed with the private key non-exportable, so I am unable to export the certificate for installation on the failover server.

My question then is - if I re-key the certificate from Go Daddy, does the original certificate installed on the primary server cease to be valid?

As an aside, the original (primary) server is IIS 6, the failover is IIS 7 (once the failover is operational, we'll likely upgrade the primary).

6

Rekeying a certificate revokes the original. See here for GoDaddy's support page on rekeying, and here for information on certificate revokation lists.

  • Thank you. I was under the impression that when a key was generated, the CSR process is computer-specific. If so, how does one install a SSL cert across 2 servers, such as my primary/failover scenario above? (should I post this as another question?) – Matt Apr 28 '10 at 14:50
  • 1
    @Matt: Yes that should be another question :) – Zypher Apr 28 '10 at 15:15
  • 2
    You can use a certificate for two servers, as long as it is valid for both of them (wildcard) – Fahad Sadah Apr 28 '10 at 16:34
2

You should be OK with exporting the certificate from the primary server and importing it to the secondary server. This is what I do with my Exchange servers.

If any one sees a technical or legal issue with this, please let me know.

  • 3
    Exporting the certificate with the private key works great, but many SSL providers require a server license to be paid for each server the certificate is used on. GoDaddy has an unlimited server license though so exporting is the right answer in this case. – Robert Apr 29 '10 at 15:28
  • 1
    From the question "with the private key non-exportable" so no exporting is going to happen. – Ram Sep 20 '11 at 18:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.