SSL on IIS & Tomcat running on same server

Solution 1:

It is possible to install the same certificate on both IIS & Tomcat. The same certificate could also be installed on several different servers, e.g. for regionally located servers for the same domain. The only requirement is that the Common Name of the certificate (or one of the Subject Alternative Names on SAN certificates) matches the servers hostname (on HTTP Host: header i.e. addressbar). In this kind of setup you could have IIS listening on default HTTPS port 443 and Tomcat on alternate 8443.

If you wish to be able to access both on default port 443, you can use IIS as a Reverse Proxy. In this scenario, IIS takes care of the TLS, so you can use the existing HTTP Connector on port 8080 internally (possibly binding it only to localhost) without encryption and only install the certificate on IIS.