使用证书创建数据库镜像

/*step 1 主实例中. 在master数据 库中创建系统密钥,如果当前系统中已经有加密密钥,可以忽略. 而后创建数据库镜像所需要的证书*/
use master
go
create master key encryption by password='1@3Mirror'
go
create certificate mirror_core_cert
with subject='core server certificate for mirror',expiry_date='2030-1-1';
go

USE [master]
GO

/****** Object:  Endpoint [Mirroring]    Script Date: 11/25/2013 9:38:24 AM ******/
/*创建节点,并指定所有者为上一步中所创建的证书. 而后备份证书,并将证书拷贝到镜像副本服务器上,以供还愿证书*/
ALTER ENDPOINT [Mirroring] 
    STATE=STARTED
    AS TCP (LISTENER_PORT = 5024, LISTENER_IP = ALL)
    FOR DATA_MIRRORING (ROLE = PARTNER, AUTHENTICATION = CERTIFICATE mirror_core_cert
, ENCRYPTION = REQUIRED ALGORITHM AES)
GO

BACKUP CERTIFICATE mirror_core_cert TO FILE='D:\certificate\MyPCMirror\mirror_core_cert.crt';
GO


/*step 2 副本实例中,在master库中创建相同的系统密钥,并创建副本的证书*/
use master
go
--create master key encryption by password='1@3Mirror'
go
create certificate mirror_secondary_cert
with subject='secondary server certificate for mirror',expiry_date='2030-1-1';
go

USE [master]
GO

/****** Object:  Endpoint [Mirroring]    Script Date: 11/25/2013 9:38:24 AM ******/
/*创建节点,并指定所有者为上一步中创建的证书. 备份证书,并拷贝到主实例的机器中,以待还原证书*/
ALTER ENDPOINT [Mirroring] 
    STATE=STARTED
    AS TCP (LISTENER_PORT = 5023, LISTENER_IP = ALL)
    FOR DATA_MIRRORING (ROLE = PARTNER, AUTHENTICATION = CERTIFICATE mirror_secondary_cert
, ENCRYPTION = REQUIRED ALGORITHM AES)
GO

BACKUP CERTIFICATE mirror_secondary_cert TO FILE='D:\certificate\MyPCMirror\mirror_secondary_cert.crt';
GO

/*step 3 副本实例中,创建登陆名及用户,并还原主实例中备份的证书,指定节点的权限,并设置数据库镜像的参与者.需要注意,端口需要是主实例服务器中设定的.*/
CREATE LOGIN mor WITH PASSWORD='test1@3';
GO
CREATE USER mor FOR LOGIN mor;
GO
CREATE CERTIFICATE mirror_core_cert
AUTHORIZATION mor
FROM FILE='D:\certificate\MyPCMirror\mirror_core_cert.crt';
GO
GRANT CONNECT ON ENDPOINT::[Mirroring] TO mor;
GO
ALTER DATABASE db1 SET PARTNER='TCP://grant-pc:5024';
GO


/*step 4 在主实例中,重复副本实例中的步骤.如果需要设置见证服务器,还需要指定一个见证服务器的地址.*/

CREATE LOGIN mor WITH PASSWORD='test1@3';
GO
CREATE USER mor FOR LOGIN mor;
GO
CREATE CERTIFICATE mirror_secondary_cert
AUTHORIZATION mor
FROM FILE='D:\certificate\MyPCMirror\mirror_secondary_cert.crt';
GO
GRANT CONNECT ON ENDPOINT::[Mirroring] TO mor;
GO

ALTER DATABASE db1 SET PARTNER='TCP://grant-pc:5023';
GO
ALTER DATABASE db1 SET PARTNER SAFETY OFF;