Generating certificates to enable SSL connections fromContext Store to a cluster of two SQL Servers hosting EDMs configured in an AlwaysOn High Availability group

Last Updated : Dec 06, 2022 |

About this task

Use this procedure to generate certificates from System Manager to secure the connection between Context Store and Microsoft SQL Servers.

Important:

  • Ensure that a separate SSL certificate is issued from System Manager for each SQL Server in the AlwaysOn Availability Group.

  • The procedures in this section are applicable when you use System Manager as a Certificate Authority (CA) for solution elements. For a third-party CA, the procedure to create the certificate might be different.

Procedure

  1. On the System Manager web console, click Services > Security > Certificates > Authority.
  2. In the navigation pane, in the RA Functions section, click Add End Entity.
  3. In the End Entity Profile field, select INBOUND_OUTBOUND_TLS.
  4. In the Username field, enter a unique name to identify the certificate being created.
  5. In the Password (or Enrollment Code) field, enter a password.

    For each end entity, the password is mandatory for authentication of the certificate generation request.

    Note:

    Note the username and password as they are required in the next steps.

  6. In the Confirm Password field, re-enter the password.
  7. Complete any other fields that you want in your certificate.
  8. In the CN, Common name field, enter the FQDN of the SQL Server node where you need to install the certificate.

    The Common Name is case-sensitive.

  9. In the Subject Alternative Name area, in the first DNS Name field, enter the FQDN of the other SQL Server node in the AlwaysOn Availability Group.
  10. In the second DNS Name field, enter the FQDN of the AlwaysOn Availability Group Listener IP.
  11. Leave the IP Address field as blank.
  12. In the Token field, select P12 file.
  13. Click Add.

    The system displays the End Entity <username> added successfully message.