By: Brandon Lee
In reply to <a href="https://www.virtualizationhowto.com/2015/04/windows-server-2012-failover-cluster-sql-2012-ssl-configuration/#comment-7375">Bill Twomey</a>.
Bill,
I have not tested this with wildcard cert, however, it should in theory work as expected as I believe 2012 failover clusters support wildcard certs. Also, again, I have not tested with availability groups, however, the cert name should match the role service name as assigned.
By: Bill Twomey
What should the certificate look like for a cluster hosting an availability group? Does it need subject alternative names for each cluster member? Will a wildcard certificate work?
By: John Lee
In reply to <a href="https://www.virtualizationhowto.com/2015/04/windows-server-2012-failover-cluster-sql-2012-ssl-configuration/#comment-7358">maul</a>.
Maul,
In creating the certificate, you need to create the certificate name based on the role server name you configured for the SQL Server role. To easily find what the cluster thinks the role name is, click on Roles >> highlight the SQL role, then on the bottom pane click the "Resources" tab and then expand server name and you should see the Name of the Role. This is the name that needs to be configured for the certificate. Also, DNS needs to match for correct FQDN resolution
By: maul
Hi, can you please confirm in .inf file what we may put as CN name . Is it going to be WINODWS CLUSTER name or SQL SERVER Virtual network name. Also please confirm do we need to give any DNS name or not .