Exchange Server Forums

UCC Certificate on 2 NLB Cluster Nodes

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Installation >> UCC Certificate on 2 NLB Cluster Nodes

Page: [1]

Message

<< Older Topic Newer Topic >>

UCC Certificate on 2 NLB Cluster Nodes - 15.Oct.2008 12:44:09 PM

edgar.morales

Posts: 40
Joined: 15.May2008
Status: offline

Hello All,
I am currently getting ready to purchase a UCC through godaddy for our company.   I just want to clarify a few things before I purchase the certificate. First let me briefly describe my setup and what I am trying to do.
I have 2 servers (Server2008) setup in an NLB cluster running the HUB and CAS roles. That portion is up and running fine. My question is regarding certificates. I want to use the same UCC on both nodes in the cluster. Is this possible?
Here is what I�ve done so far
1.       On the first node I�ve ran the �New-ExchangeCertificate �GenerateRequest� on this node that included all my SANs. This created a CSR fine and I am see to see the thumbprint for the request when I run �Get-ExchangeCertificate� from this node.
I would assume that the next step is to submit the CSR to godaddy and wait for them to send my a new CER file for the request. Then I would run the �import-ExchangeCertificate� command to import the cert in the node and specify the �Enable-ExchangeCertificate� with the appropriate services.
My question is what would be the process of importing the same CER file I received from godaddy into the other node in the cluster?   Do I have to run the �Get-ExchangeCertifcate� to generate a new CSR or do I simply export the cert from the first node and import into the second node?   My concern is if I try to import the CER file from godaddy in to the second node the private key used to generate the original CER will cause an issue since it was generated from the first node.   What is the recommend way of performing this task?

Any help and or clarification is appreciated.

Post #: 1

Featured Links*

RE: UCC Certificate on 2 NLB Cluster Nodes - 15.Oct.2008 1:20:18 PM

Exchange_Geek

Posts: 1287
Joined: 31.Dec.2006
Status: offline

http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-client-access/securing-exchange-2007-client-access-server-3rd-party-san-certificate.html

(in reply to edgar.morales)

Post #: 2

RE: UCC Certificate on 2 NLB Cluster Nodes - 15.Oct.2008 1:38:33 PM

Draconis

Posts: 256
Joined: 11.Sep.2008
From: Connecticut, USA
Status: offline

Doh...I'm too slow on the replies.

< Message edited by Draconis -- 15.Oct.2008 1:39:52 PM >

(in reply to edgar.morales)

Post #: 3

RE: UCC Certificate on 2 NLB Cluster Nodes - 15.Oct.2008 1:41:33 PM

edgar.morales

Posts: 40
Joined: 15.May2008
Status: offline

Thanks for the quick reply!! I believe I have the steps down for performing this procedure on a single node. My question has to do with the procedures for the second NLB node.

Do I need to generate a new CSR on the second node? If not, do I simply import the same CER issued by Godaddy into the second node without generating a CSR on the second node?

If both of my statements are incorrect, do I need to export the certificate from the first node (after importing the new CER on the first node) and then import it into the second node?

Sorry for the confusion

(in reply to Exchange_Geek)

Post #: 4

RE: UCC Certificate on 2 NLB Cluster Nodes - 15.Oct.2008 1:52:52 PM