Sharing a certificate with multiple IIS servers

i’ve read some about it. but i couldn’t figure out if it’s supported to multiple servers.
for example, a single point where i can load a wildcard certificate and push it to multiple iis servers at once.

The app won’t configure that on you behalf but yes you can use it that way:

  • Setup a new managed certificate on one server
  • Add a Deploy To CCS deployment task under Tasks, configure the task parameters to copy the PFX file to a share of your choice (or copy to each server with one task each)
  • Configure IIS on the other servers to use CCS (Centralised Certifiate Store) from the nominated share, configure your IIS site https bindings to use CCS.

In general though, most users have one install of the app per IIS server (or exchange etc) and just manage the relevant certificates on each server. We are working on a management hub system to make managin renewals across multiple servers much easier.

thank you
so if it’s a standalone product, what’s the upside of using it? :slight_smile:

sorry I don’t understand your question.

about this. doesn’t it mean that i have to manually go into the server every year and install a new certificate?

Certify Certificate Manager is a tool to manage certificates using the ACME automated certificate management protocol. Many other such tools exist but they tend to be command line based, whereas our app provides a standard windows UI. ACME certificates are intended to be short lived and typically renew automatically every 90 days or less using a CA such as Let’s Encrypt.

The app consists of a UI and background service, so once you have a certificate set up you can typically leave the app to manage renewals automatically, which is managed by the service.

We recommend simply downloading the app to try it and see if if meets your needs, if it doesn’t we may be able to suggest alternative tools.

thank you
can the app “absorb” the certificate from external source?
meaning…
for example, i have 10 iis servers, all different, each with another virtual website, different names, ports and such.

now, i install and configure the app on each server. can i setup this app in each server that he will pull the certificate from a single location in order to perform its automation?
for example, i issue a 3rd party cert with godaddy, than place it on a central ftp\sftp\fileshare. can the app pull the cert from there? (meaning, each app that is installed on each server individually)

Hi, no the app does not currently have the feature to pull certificates from external sources. We do plan to add features like that in the future but these will mainly pull from secrets vaults like Azure KeyVault, Hashicorp Vault and from a Certify management hub.