1

We have a production machine running IIS6 with a wildcard SSL certificate. The certificate that was installed is not exportable.

We want to upgrade the system to IIS7. As part of this venture, we're creating a backup/failover server that will serve the exact same websites - when we take the primary down for upgrade, the secondary will take over. As such, the secondary also needs the SSL certificate.

However, since the certificate was not exportable, this means re-keying it from Go Daddy.

Per http://help.godaddy.com/article/867, I know that by re-keying the certificate the original will stop working.

I'm still pretty new to SSL certificates, so are there any problems I should anticipate when installing the same SSL certificate on 2 different machines?

1

As long as the certificate is valid for both of them, you should be fine.

2
  • Please elaborate - under what circumstances would a certificate be valid for one machine, but not the other? – Matt Apr 30 '10 at 15:13
  • A certificate contains a domain name, list of domain names, or wildcard domain name that it is valid for. For example, a certificate for alpha.domain.com cannot be used on beta.domain.com, but one for *.domain.com can be used on both. – Fahad Sadah Apr 30 '10 at 15:43
2

I would re-key the certificate and install it on the secondary machine and make sure that it's exportable. Then, export the certificate and install it on the existing server. This ensures that they both have the same exact certificate in place. Keep a copy of the PFX export file in a safe place in case you need to restore it again later.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.