Hello all,
Here is my scenario: I have a production Clearpass server and will be adding another using a VIP. I need to order a new 3rd party cert that references both servers. When creating the CSR do I need to reference the VIP FQDN and IP or just Server1 and Server2 FQDN and IP's?
For example:
CN: cppm.xxx.com
SAN:DNS:cppm01.xxx.com,DNS:cppm02.xxx.com,IP:10.17.2.31,IP:10.17.2.32
or like this with the VIP in the SAN:
CN: cppm.xxx.com
SAN:DNS:cppm.xxx.com,DNS:cppm01.xxx.com,DNS:cppm02.xxx.com,IP:10.17.2.30,IP:10.17.2.31,IP:10.17.2.32
Hope that makes sense, thanks for your help.