Hi Is there anyway to network loadbalance two Certificate Services Web Enrollment servers? Kind regards Mikael

Just to be clear, do you mean Certificate Services Web Enrollment or Certificate Services Enrollment Web Services? If the former, it is simply a virtual directory in IIS so can be load balanced using anything that supports web server load balancing. The usual options would be NLB or a hardware load balancer... If the latter, have a look here: http://www.microsoft.com/en-us/download/details.aspx?id=1746 Cheers JJJason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

Just to be clear, do you mean Certificate Services Web Enrollment or Certificate Services Enrollment Web Services? If the former, it is simply a virtual directory in IIS so can be load balanced using anything that supports web server load balancing. The usual options would be NLB or a hardware load balancer... If the latter, have a look here: http://www.microsoft.com/en-us/download/details.aspx?id=1746 Cheers JJJason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

Hi Jason Thanks for your reply. It's the former one called Certificate Services Web Enrollment. One thing im unsure of is when you do a certificate enrollment thorugh it and if it's network load balanced what will happen if certificate request is put in pending state until an CA officer approves it? I read somewhere that IIS application Certificate Services Web Enrollment implements session cookies and those are not shared between the network load balanced hosts. Fo my understanding, this could give me a problem when we do a status check for the pending certificate if the network load balancer for some reason decides to redirect traffic to the other host with no cookie. Kind regards Mikael

Hi Jason Thanks for your reply. It's the former one called Certificate Services Web Enrollment. One thing im unsure of is when you do a certificate enrollment thorugh it and if it's network load balanced what will happen if certificate request is put in pending state until an CA officer approves it? I read somewhere that IIS application Certificate Services Web Enrollment implements session cookies and those are not shared between the network load balanced hosts. Fo my understanding, this could give me a problem when we do a status check for the pending certificate if the network load balancer for some reason decides to redirect traffic to the other host with no cookie. Kind regards Mikael