Should I Issue a different SSL certificate to different devices?

Question

Hey, kinda new to the certificates thing,

I want to issue an Internal SSL certificate for my switches, printers and servers using my CA currently i have only 1 certificate on my CA server which was created when i 1st installed it, what would be the best way to issue an Internal SSL certificate for the devices/servers?

Should i create a different certificate for each device?
Or can i just enroll and/or import the existing 1 to all devices, i need some explaination, didn't "play" with the CA options myself before,

Thanks in advanced.

Answer 1

Hi @Raz Weingarten

Yes you will need Certificate Template for the servers and you can set it up on the SUBCA server check this page and steps:configure-the-server-certificate-template

I have also provided link for the WIFI Certs if you are planning to use on the devices - deploy-server-certificates-for-802.1x-wired-and-wireless-deployments

Hope this helps.

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hello there,

You can use the same certificate.

What happens if I have two SSL certificates installed?
When you install two SSL certificates on the same domain it forces the server to decide which one to serve. In some cases, the server will send the most recently installed certificate to visiting browsers assuming it’s likely the most secure. In other cases, the server may rotate the certificates. It comes down to configuration.

Also, keep in mind that various extensions could cause problems with this implementation, for instance, is a browser has a plugin that caches SSL certificates having your site continually use different ones could cause issues.

----------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–