Forum Discussion

Copper Contributor

Jan 16, 2024

SSL Certificate & Availability Group Question

Hello- I have the below SSL AG question: I have 4 servers below and would like to confirm my thought is correct by ordering 4 separate SSL certificates *with each separate SQL instance name* or ord...

LainRobertson

Silver Contributor

Jan 16, 2024

Mike_Miller1535

Hi, Craig.

It's been a very long time since I've set up AlwaysOn, but from memory, I chose a different route for the certificate.

I used a single certificate using the following configuration:

Subject name	Availability group FQDN
SAN	Availability group FQDN The FQDN of every member

So, for example, if I have an Availability Group FQDN of "sqlag.robertsonpayne.com" with three members (sql01.robertsonpayne.com to sql03.robertsonpayne.com) then the certificate request would feature:

Subject name	sqlag.robertsonpayne.com
SAN	sqlag.robertsonpayne.com sql01.robertsonpayne.com sql02.robertsonpayne.com sql03.robertsonpayne.com

This is a pretty standard configuration for a certificate and made the ongoing administrative overhead (technical and financial) a little easier to keep on top of.

Cheers,

Lain

Mike_Miller1535
Copper Contributor
Feb 05, 2024
Thanks Lain for the feedback much apricated!