top of page

Availability Groups and SSL

  • Adam Thurgar
  • Mar 23, 2018
  • 1 min read

SQL Server has supported SSL for a number of years and you can enable SSL encryption for your Availability Group listeners to encrypt your data in transit.

When connecting to an availability group listener, if the participating instances of SQL Server use SSL certificates in conjunction with session encryption, the connecting client driver will need to support the Subject Alternate Name in the SSL certificate in order to force encryption.

Example: In this case there are 3 listeners in the SAN of the SSL certificate

CN = vintdbs003.stage.xyz.com.au

SAN = vintdbs003.stage.xyz.com.au,virlidbs001.stage.xyz.com.au, virlidbs003.stage.xyz.com.au, virlidbs005.stage.xyz.com.au


 
 
 

Recent Posts

See All
Cardinality estimator

Recently I was asked by a software vendor to review a particular query that ran in under a second on a SQL Server 2014 installation at a...

 
 
 
Index fragmentation

A law firm client, occasionally has issues with their legal software, that is provided by the global leader in this field. The response...

 
 
 
Deleting large amounts of data

I had a client call me about wanting to delete a large amount of data from their database. They knew what tables they wanted to delete...

 
 
 

Comments


bottom of page