Hi James, On 11/05/17 21:43, James M. Pulver wrote: > So does this mean I could, for instance, get a certificate for > *.classe.cornell.edu and install it in all the IMMs etc, and be "good" > rather than getting one per IMM hostname?
Maybe - some IMMs only allow signing a CSR they create, rather than being able to upload a private key and certificate (I'm reasonably sure that's the case for IBM/Lenovo xSeries IMM). Most wildcards will only allow a single key which would mean you could only sign a single IMM. DigiCert is an exception, you can re-issue the cert as many times as you want against different keys (and with different SANs), however you're looking at $500/year for one of those. For us, it was worth it, and their customer service is very good. Thanks, -- James Andrewartha Network & Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 _______________________________________________ Enterprise mailing list [email protected] https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to [email protected] with a subject of "unsubscribe"
