Method for producing failover in a network including a client and a first server, wherein the method comprises at least the following steps: one-time transmission of a main certificate (8, 26), which is assigned to the first server, and at least one reserve certificate (9, 27) to the client, and submitting a request of the client to the first server, wherein the first server authenticates itself with respect to the client as the owner of the main certificate (8, 26) after a successful request of the client to the first server, characterized in that the network includes a second server, wherein the reserve certificate (9, 27) is assigned to the second server, in that the client submits a request to the second server after an unsuccessful request of the client to the first server and the second server authenticates itself with respect to the client as the owner of the reserve certificate (9, 27), so that the client can turn to the second server directly without user intervention and without a later exchange of certificates (8, 9, 26, 27) if the request to the first server has not been successful, in that the first server and/or the second server respectively contain a hardware security module (5, 6), in which a private key of the first or of the second server (2, 3) assigned to the main certificate (8, 26) or to the reserve certificate (9, 27) is stored in a manner to be not readable, in that a secure connection between the client and the first server or the second server is established to transmit user data after a successful authentication with respect to the client by the first server or by the second server, and in that the transmission of the main certificate (8, 26) and of the at least one reserve certificate (9, 27) is effected prior to a connection of the client to the network. one-time transmission of a main certificate (8, 26), which is assigned to the first server, and at least one reserve certificate (9, 27) to the client, and submitting a request of the client to the first server, wherein the first server authenticates itself with respect to the client as the owner of the main certificate (8, 26) after a successful request of the client to the first server, characterized in that the network includes a second server, wherein the reserve certificate (9, 27) is assigned to the second server, in that the client submits a request to the second server after an unsuccessful request of the client to the first server and the second server authenticates itself with respect to the client as the owner of the reserve certificate (9, 27), so that the client can turn to the second server directly without user intervention and without a later exchange of certificates (8, 9, 26, 27) if the request to the first server has not been successful, in that the first server and/or the second server respectively contain a hardware security module (5, 6), in which a private key of the first or of the second server (2, 3) assigned to the main certificate (8, 26) or to the reserve certificate (9, 27) is stored in a manner to be not readable, in that a secure connection between the client and the first server or the second server is established to transmit user data after a successful authentication with respect to the client by the first server or by the second server, and in that the transmission of the main certificate (8, 26) and of the at least one reserve certificate (9, 27) is effected prior to a connection of the client to the network.