Installing Primary Servers using External CA

Hello all,

I'm hoping someone can help answer a query, as the docs aren't making sense to me!

I'm in the process of installing a new zone on ZCM 11 SP2, using an External CA.

I have successfully installed the first Primary server using certs from External CA and everything is working well. When attempting to add additional Primary Servers, after authentication to the zone and accepting the CA certificate, I am being prompted to specify signed SSL certificate and Private Key file for the new server. The docs I have read imply that ZCM will just use certificates from the First Primary Server in the zone?

Should I be using the certificates from the First Primary Server, or should each Primary server have it's own Signed certificate from the External CA?

Very grateful for any pointers!

Thanks

Steve Winter