Certificate & LDAPS

[mhuttunen]

I have two Vault servers in an HA mode. Servers are integrated to AD using LDAP. Now I am supposed to switch on using LDAPS. For that I need client certificate(s). To my understanding the LDAPS configuration is shared across the servers. Should I therefore have a multi-server (client) certificate, which identifies both servers?

Br,
Marko

[maxb]

@mhuttunen

Now I am supposed to switch on using LDAPS.

OK

@mhuttunen

For that I need client certificate(s).

You may choose to, but it is not a requirement to use LDAPS.

@mhuttunen

To my understanding the LDAPS configuration is shared across the servers.

Yes

@mhuttunen

Should I therefore have a multi-server (client) certificate, which identifies both servers?

Therefore yes, you must.

But client certificates are not linked to server names - other than by any local convention you may choose to create for yourself.