In Multi-Node Orchestrator, Can Server Specific Certificate Be Used?

News Knowledge Base
1

Orchestrator is setup on multi node and uses Load Balancer(LB) certificate for the same. Can server specific certificate be used where both thumbprint have different values?

  • In multi node, it is always advisable to issue certificate with subject name = FQDN, this FQDN should be mapped and resolved to Load Balancer IP.
  • Specific server names can be added as SAN entries but the IIS binding should not be mapped to a specific host name, it should be empty.
  • This single certificate should be used by all nodes and traffic should come via FQDN mapped to LB only. Do not use server specific different certificate, as the data will mismatch & Redis cannot sync.