Requesting a certificate with Subject Alternative Names
A certificate's Subject Alternative Name (SAN) is often used on servers that have only one web service running, but are accessed from multiple DNS names. A Horizon Security Server or Access Point are examples of this, as they are often accessed using a publicly known name such as horizon.vjason.com
, as well as a private (internal) name such as viewsec-01.vjason.local
, and even their IP address. Additionally, App Volumes Manager servers require their FQDN, server name, and IP address in their certificates.
While a certificate will work regardless of what DNS name was used to connect to it, if the DNS name or IP address used to access it is not present as a SAN in the certificate, the client will receive an error that the certificate name does not match. To prevent these errors from occurring when requesting the certificate, we simply need to provide a list of the different DNS names or IP addresses that will be used to connect to...