| Author |
Message |
Marlon Brown
Guest
|
Posted:
Mon Jan 24, 2005 6:46 am Post subject:
Digital certificate for NLB(OWA) |
|
|
Imagine I have two Win2003 boxes (OWA 2003), NLB configuration.
Do I have to generate an SSL certificate for each box, or should I generate
just one certificate and install on both nodes ?? |
|
| Back to top |
|
 |
Rodney R. Fournier [MVP]
Guest
|
Posted:
Mon Jan 24, 2005 6:46 am Post subject:
Re: Digital certificate for NLB(OWA) |
|
|
A cert for each box. Some vendors that issue them will check, cause it's
against there rules.
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://www.msmvps.com/clustering - Blog
"Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:uL5hbgbAFHA.3940@TK2MSFTNGP09.phx.gbl...
| Quote: | Imagine I have two Win2003 boxes (OWA 2003), NLB configuration.
Do I have to generate an SSL certificate for each box, or should I
generate just one certificate and install on both nodes ??
|
|
|
| Back to top |
|
 |
Russ Kaufmann
Guest
|
Posted:
Tue Jan 25, 2005 1:27 am Post subject:
Re: Digital certificate for NLB(OWA) |
|
|
"Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:uL5hbgbAFHA.3940@TK2MSFTNGP09.phx.gbl...
| Quote: | Imagine I have two Win2003 boxes (OWA 2003), NLB configuration.
Do I have to generate an SSL certificate for each box, or should I
generate just one certificate and install on both nodes ??
|
It is supposed to be a cert per box but they both have to have the same
common name. |
|
| Back to top |
|
 |
Marlon Brown
Guest
|
Posted:
Tue Jan 25, 2005 6:46 am Post subject:
Re: Digital certificate for NLB(OWA) |
|
|
Hmmm... can you clarify the same common name ?
Imagine my boxes will be named OWA1 and OWA2. The "NLB/Cluster" name is
myowa.company.com.
I always thought that the digital certificate needed to be generated from a
..csr on the respective boxes ?
Please clarify how the common name will work on this case then ?
"Russ Kaufmann" <russ@exchangemct.com> wrote in message
news:%234uZTpkAFHA.2788@TK2MSFTNGP15.phx.gbl...
| Quote: | "Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:uL5hbgbAFHA.3940@TK2MSFTNGP09.phx.gbl...
Imagine I have two Win2003 boxes (OWA 2003), NLB configuration.
Do I have to generate an SSL certificate for each box, or should I
generate just one certificate and install on both nodes ??
It is supposed to be a cert per box but they both have to have the same
common name.
|
|
|
| Back to top |
|
 |
Rodney R. Fournier [MVP]
Guest
|
Posted:
Tue Jan 25, 2005 6:49 pm Post subject:
Re: Digital certificate for NLB(OWA) |
|
|
Here is what Verisign has to say
http://www.verisign.com/products-services/security-services/ssl/page_006489.html#01000005
You can also see their white paper at
http://www.verisign.com/static/001496.pdf page 9 explains what Russ is
saying!
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://www.msmvps.com/clustering - Blog
"Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:eM0iDOpAFHA.1400@TK2MSFTNGP11.phx.gbl...
| Quote: | Hmmm... can you clarify the same common name ?
Imagine my boxes will be named OWA1 and OWA2. The "NLB/Cluster" name is
myowa.company.com.
I always thought that the digital certificate needed to be generated from
a .csr on the respective boxes ?
Please clarify how the common name will work on this case then ?
"Russ Kaufmann" <russ@exchangemct.com> wrote in message
news:%234uZTpkAFHA.2788@TK2MSFTNGP15.phx.gbl...
"Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:uL5hbgbAFHA.3940@TK2MSFTNGP09.phx.gbl...
Imagine I have two Win2003 boxes (OWA 2003), NLB configuration.
Do I have to generate an SSL certificate for each box, or should I
generate just one certificate and install on both nodes ??
It is supposed to be a cert per box but they both have to have the same
common name.
|
|
|
| Back to top |
|
 |
|
|
|
|