2
Yes, technically the CSR request can be signed with any key anywhere, but once the signed certificate is generated you will need to use the same key you have used for the CSR request.
So in other words, you will need to transfer the key somehow to the servers so Tomcat can use the certificate along with the key.
Only top voted, non community-wiki answers of a minimum length are eligible
