2

few questions, I am moving to another hosting provider.

  1. In IIS, when I create the request CSR, do i have to enter the EXACT same information for it to work with the response certificate I got via email from geotrust?

  2. if I have a load balancer, with 2 front end servers, can I install the certificate on both boxes or I have to buy a special certificate for that?

  • 1
    Are you moving a server, or just content? Same domain name? If it is the same domain, you can use the existing cert. – DanBig Dec 8 '09 at 20:56
  • same domain, different server (ISP). – user2659 Dec 8 '09 at 21:18
3

If you're not changing your domain name, just export your certificate and the private key from your current server and import it into the new server. (That procedure assumes you're exporting a user certificate. For your web site, choose "Computer Account" when opening the management console snap-in.)

Assuming your load balancer is doing SSL offload you can load your certificate and private key into the load balancer, as well. Export the certificate and private key and import them into your load balancer per the manufacturer's procedure for key import.

  • I don't have access to the load balancer, its in a shared enviro. – user2659 Dec 8 '09 at 21:18
  • Then you don't want the load balancer doing SSL offload, because it'll have your private key. Hopefully the load balancer is SSL-aware and can keep user sessions sticky w/ respect to the given server the SSL session starts on. (Most are, though, so you should be fine). Load the private key and certificate on all your web servers and do SSL on the web servers. – Evan Anderson Dec 8 '09 at 21:26
  • Also see sslshopper.com/… for clear export/import instructions. – Robert Dec 10 '09 at 3:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.