I have installed and configure sharepoint app in dev using self-sign certificate but turn off ssl requirement. Now i need to do in production ,but have question.

current production doesn't use ssl with 2wfe (load balance using netscaler), 2 app 

Here is my plan, does that sound right

1) get 2 certificate (1 for sharepoint, and 1 for hosting provider app (this will need to be wild card))

2) install certificate on all sharepoint server 

3) configure app server with wild card certificate.

Is certificate bound to server or domain or web application? if i have teams.contoso.com and projects.contoso.com, do i need 2 certificate?

Hi Viet,

As my understanding, you want to configure SharePoint app with SSL. Is it right?

Certificate is bound to web application (multiple certificates to be bound, one per content web application).

And if you have teams.contoso.com and projects.contoso.com, per my knowledge, you need these two certificate.

There are some articles about configuring apps for SharePoint, please check if they are useful for you:

http://blogs.blackmarble.co.uk/blogs/adawson/post/2014/08/15/Configuring-SharePoint-2013-Apps-and-Multiple-Web-Applications-on-SSL-with-a-Single-IP-Address.aspx

https://technet.microsoft.com/en-us/library/fp161237.aspx

http://blogs.technet.com/b/mspfe/archive/2013/01/31/configuring-sharepoint-on-premise-deployments-for-apps.aspx

http://www.nothingbutsharepoint.com/2013/02/13/configure-an-environment-for-apps-for-sharepoint-2013-aspx/

Best Regards,

Wendy