I have inherited two SQL 2016 servers with two mirrored databases.
They have been built with certificates as they are in a workgroup, the certs expire in six months. I am trying to understand the process to replace the certs with new ones with a longer lifespan, and if the process can be done online with no downtime?
Just to confirm the certs haven't expired yet, I am just being proactive.
I am thinking something like this:
- Create new certs with longer expiry dates
- Backup the certs to files and copy between primary and secondary servers
- Restore the certs with Authorisation to the existing mirror users no need to create new users
- Alter the existing end points to point to the new certs
- Clean up