I have inherited two SQL 2016 servers with two mirrored databases.

They have been built with certificates as they are in a workgroup, the certs expire in six months. I am trying to understand the process to replace the certs with new ones with a longer lifespan, and if the process can be done online with no downtime?

Just to confirm the certs haven't expired yet, I am just being proactive.

I am thinking something like this:

  • Create new certs with longer expiry dates
  • Backup the certs to files and copy between primary and secondary servers
  • Restore the certs with Authorisation to the existing mirror users no need to create new users
  • Alter the existing end points to point to the new certs
  • Clean up

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.