We help IT Professionals succeed at work.

Can I install 2 SSL Certificate on Windows 2000 Server

798 Views
Last Modified: 2013-11-05
Hi I have one windows 2000 server which we are using as a Webserver it has 2 network cards

one is configure with internal IP address and second with External IP address. server is already been installed with SSL certificate and now I need to install another Certificate

Could you please tell me how can i Do it

Do i have to install another network card with the new global IP address?
Comment
Watch Question

CERTIFIED EXPERT

Commented:
I would have to go back and check but I think the limitation is that you can only have one certificate per web site (not IIS server, basically each new port or site with a unique host header).  So, as long as its a new site then you should be able to do this with no problem ... thisnk ISP, they host lots of SSL sites on one server.
If you need a second certificate for an existing site then I think you would have to set up a new site and then redirect once they arrive there and validate.

Commented:
You can only have 1 SSL certificate per *IP*address*.  SSL handshake happens before the headers (with the host name) are transmitted, so you can't run several virtual hosts on the same IP with different certificates.

You don't have to install a 2nd network card, however you do have to get a 2nd public IP address and assign it to the card you already have (a network interface can have many IP's assigned).

Author

Commented:
In windows 200o server how can you add multipe Ip address can you tell me please

Commented:
Go to network connection properties, select Internet Protocol TCP/IP, click Properties then click advanced.

Author

Commented:
sorry I forget to mention they have one Network card with 192.168.0.168 ip address for Second SSL do I have to use another Globall Ip address to pr simply I can  add another 192.168.0.169 address to  network and it will work
CERTIFIED EXPERT

Commented:
Are you sure about the 2 IPs?

If you are using a new certificate anyway then give it a try just using host headers.
The certificates are keyed to the site name so I would expect it to work with different host headers and not require a new IP for each one ... but hey, until I try it I can't say for sure ... if you try it let us know if it works.
CERTIFIED EXPERT

Commented:
In reading your question it raises the issue ... do you need a second SSL certificate, if so for what?  If it is just to secure an addition site running off the same server then you can do this with the existing certificate (well, most likely).
If you need to use a new domain name then yes, since the certificates verify the URL against the name on the certificate then you need a new certificiate for this.
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.