If cryptography certificates are used in production environment and the production environment is replicated to disaster recovery, would the same certificates be valid for the disaster recovery environment?

closed as too broad by techraf, S.L. Barth, Stephane, Rory Alsop Sep 26 '16 at 16:40

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Ekhm... yes? If you use the right configuration and the right type of certificate, for example? This is way too broad there are at least 57,786 possible ways of a configuration being a production environment and at least 452 different way on configuring certificates in each (the certificates will not work in at least one of those configurations). It is much better to provide a scenario that can be replicated. – grochmal Sep 26 '16 at 11:16

As long as you have the certificate key pair (public and private), any computer can act as identified by the the certificate CN (common name). This is suppose to match the FQDN of your service, or else many browser will fail the authentication on the client side without even checking the signatures.

Provided that you use a reverse proxy (or DNS changes) to switch from production to recovery server, the transition can appear seamless to the client.

Not the answer you're looking for? Browse other questions tagged or ask your own question.