Issues with tls cluster settings

I have two servers, do I need to generate tls on both servers, or do I just need to generate and copy it on one server