Installing SQL FCI Instance certificates

• Raxso1

  SSC Veteran

  Points: 272

  More actions

  March 23, 2025 at 12:31 pm

  #4565864

  SQL FCI Instance certificates

  I have a client who has a requirement for certificates bound to the instance in a FCI environment. I have create the certificate and installed on both nodes, but I get a cluster error when failing over. The environment setup

  Node1

  Node2

  FCI Instance name\SQLInstance

   

  Have set the FCI and the certificate CN name and added the nodes as subject alternative names. Do I just request the cert from the active node and copy it to other nodes and add the thumbprint to the reg as well

  https://www.google.com/search?client=firefox-b-d&q=SQL+fci+failng+to+bring+resource+online+after+applyin+certificate+to+sql+instance

   

• Site Owners

  SSC Guru

  Points: 80342

  More actions

  March 24, 2025 at 1:10 pm

  #4566408

  Thanks for posting your issue and hopefully someone will answer soon.

  This is an automated bump to increase visibility of your question.

• EdVassie

  SSC Guru

  Points: 60515

  More actions

  March 31, 2025 at 6:36 am

  #4570549

  Yes, the thumbprint needs to be the same on all the nodes.

  Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
  

  When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara

• deubel_m

  SSC-Addicted

  Points: 469

  More actions

  April 6, 2025 at 6:59 am

  #4573937

  The SQL Server service accounts need read permissions on the private key of the certificate, on both nodes.