I've got a situation that is puzzling me. We have a vendor that is requiring mutual authentication when making a request to them. They are requesting we give them a client cert identifying our company for verification. That would seem to be easy enough for a single server (JBOSS server, BTW), but how do I generate a CSR for use on multiple requesting servers behind a single external NAT? Does it make a difference which machine I generate the keys on as long as the signed cert is loaded onto all machines that can make requests to the vendor so that they all present teh same client cert? Thanks in advance for any help you can give on this.