Cluster considerations when renewing certificates

[stephenmoreau]

SSL cetificates are expiring in less than a month on our IronPort cluster. I did not set up the original certs. I have the steps for generating CSR and uploading new certificates to a standalone ESA but cannot locate anything regarding preparation of a cluster for new certificates. Perhaps it's because I don't need to do anything 'clusterwise'?

Any comments or assistance appreciated.

[David Owens]

That was my case - my certificates were all based on the machine (2 of the 3 appliances) and just had to upgrade the two systems were the certificate was about to expire.  Was fairly straight forward and no issues other than I recieved one bad certificate from my security group.