Follow these steps on each server instance that you are configuring for database mirroring:

1. In the master database, create a database master key.
   
2. In the master database, create an encrypted certificate on the server instance.
   
3. Create an endpoint for the server instance using its certificate.
   
4. Back up the certificate to a file and securely copy it to the other system or systems.
   

You must complete these steps for each partner and the witness, if there is one.

For more information, see How to: Allow Database Mirroring to Use Certificates for Outbound Connections (Transact-SQL).

Next, follow these steps for each partner that you are configuring for database mirroring. In the master database:

1. Create a login for the other system.
   
2. Create a user for that login.
   
3. Obtain the certificate for the mirroring endpoint of the other server instance.
   
4. Associate the certificate with the user created in step 2.
   
5. Grant CONNECT permission on the login for that mirroring endpoint.
   

If there is a witness, you must also set up inbound connections for it. This requires setting up logins, users, and certificates for the witness on both of the partners, and vice versa.

For more information, see How to: Allow Database Mirroring to Use Certificates for Inbound Connections (Transact-SQL).

Unless you can guarantee that your network is secure, we recommend that you use encryption for database mirroring connections. For more information, see Database Mirroring Endpoint.

When copying a certificate to another system, use a secure copy method. Be extremely careful to keep all of your certificates secure.

Tasks

Concepts

Other Resources

Help and Information