Generating certificates to enable SSL connections fromContext Store to a cluster of two SQL Servers hosting EDMs configured in an AlwaysOn High Availability group

Last Updated : Dec 06, 2022 |
Use this procedure to generate certificates from System Manager to secure the connection between Context Store and Microsoft SQL Servers.
Important:
  • Ensure that a separate SSL certificate is issued from System Manager for each SQL Server in the AlwaysOn Availability Group.
  • The procedures in this section are applicable when you use System Manager as a Certificate Authority (CA) for solution elements. For a third-party CA, the procedure to create the certificate might be different.
  1. On the System Manager web console, click ServicesSecurityCertificatesAuthority.
  2. In the navigation pane, in the RA Functions section, click Add End Entity.
  3. In the End Entity Profile field, select INBOUND_OUTBOUND_TLS.
  4. In the Username field, enter a unique name to identify the certificate being created.
  5. In the Password (or Enrollment Code) field, enter a password.
    ADDITIONAL INFORMATION:
    For each end entity, the password is mandatory for authentication of the certificate generation request.
    ADDITIONAL INFORMATION:
    Note:
    Note the username and password as they are required in the next steps.
  6. In the Confirm Password field, re-enter the password.
  7. Complete any other fields that you want in your certificate.
  8. In the CN, Common name field, enter the FQDN of the SQL Server node where you need to install the certificate.
    ADDITIONAL INFORMATION:
    The Common Name is case-sensitive.
  9. In the Subject Alternative Name area, in the first DNS Name field, enter the FQDN of the other SQL Server node in the AlwaysOn Availability Group.
  10. In the second DNS Name field, enter the FQDN of the AlwaysOn Availability Group Listener IP.
  11. Leave the IP Address field as blank.
  12. In the Token field, select P12 file.
  13. Click Add.
    STEP RESULT:
    The system displays the End Entity <username> added successfully message.