Cert on IIS Ports?

Hi there,

I would like to get something clarified as I have been
reading conflicting articales on it.

Here is the senario:
IIS6.0 on W2K3 Server
Multiple sites (10 in total)
Single IP for the Server
Sites are distingished by using ports, not host headers.

Question 1:
Can I use a digital cert on 6 of the 10 sites? They are
all individual and are accessible internally i.e
www.site1.com = http://10.10.10.1:8060
www.site2.com = http://10.10.10.1:8062
www.site3.com = http://10.10.10.1:8064
etc, etc.

These are then mapped through a firewall to an external IP
address for each site

Question2:
The above setup is the same on 6 webservers that are load
balanced through a Cisco hard loadbalancer. When I create
the cert, do I need to create a cert for each site on each
server even if the domain name www.site1.com can go to
anyone of the 6 servers? Or do I only create 1 cert and
when it is certifoed by the CA I install the 1 cert on all
the servers?

Thanks.

T

On Fri, 23 Jan 2004 01:22:33 -0800, "Tops"
<anonymous.RemoveThis@discussions.microsoft.com> wrote:

 >Hi there,
 >
 >I would like to get something clarified as I have been
 >reading conflicting articales on it.
 >
 >Here is the senario:
 >IIS6.0 on W2K3 Server
 >Multiple sites (10 in total)
 >Single IP for the Server
 >Sites are distingished by using ports, not host headers.
 >
 >Question 1:
 >Can I use a digital cert on 6 of the 10 sites? They are
 >all individual and are accessible internally i.e
<font color=purple> >www.site1.com = <a style='text-decoration: underline;' href="http://10.10.10.1:8060</font" target="_blank">http://10.10.10.1:8060</font</a>>
<font color=purple> >www.site2.com = <a style='text-decoration: underline;' href="http://10.10.10.1:8062</font" target="_blank">http://10.10.10.1:8062</font</a>>
<font color=purple> >www.site3.com = <a style='text-decoration: underline;' href="http://10.10.10.1:8064</font" target="_blank">http://10.10.10.1:8064</font</a>>
 >etc, etc.
 >
 >These are then mapped through a firewall to an external IP
 >address for each site

Yesy, it should work.

 >Question2:
 >The above setup is the same on 6 webservers that are load
 >balanced through a Cisco hard loadbalancer. When I create
 >the cert, do I need to create a cert for each site on each
 >server even if the domain name <a style='text-decoration: underline;' href="http://www.site1.com" target="_blank">www.site1.com</a> can go to
 >anyone of the 6 servers? Or do I only create 1 cert and
 >when it is certifoed by the CA I install the 1 cert on all
 >the servers?

Normally, load balanced servers use the same cert. Don't know any
reason the Cisco would change this.

Jeff<!-- ~MESSAGE_AFTER~ -->