Mirror–使用证书配置镜像模板

--=========================================================================================================
--创建Master key
--在主服务器和镜像服务器上运行
USE master;
GO
IF NOT EXISTS(SELECT 1 FROM sys.symmetric_keys k WHERE k.Name=‘##MS_DatabaseMasterKey##‘)
BEGIN
CREATE MASTER KEY ENCRYPTION BY PASSWORD =‘master@key123‘
END
GO
IF NOT EXISTS(SELECT 1 FROM sys.databases db WHERE db.[is_master_key_encrypted_by_server]=1)
BEGIN
ALTER MASTER KEY ADD ENCRYPTION BY SERVICE MASTER KEY
END
GO

--=========================================================================================================
--创建和备份证书
--在主服务器上运行
IF NOT EXISTS (SELECT 1 FROM sys.certificates C WHERE C.Name=‘HOST_3_32_cert‘ )
BEGIN
CREATE CERTIFICATE HOST_3_32_cert WITH SUBJECT =‘HOST_3_32_cert‘,
START_DATE = ‘01/01/2010‘ , EXPIRY_DATE = ‘01/01/2199‘;
END
GO
BACKUP CERTIFICATE HOST_3_32_cert TO FILE=‘D:\HOST_3_32_cert.cer‘
GO

--=========================================================================================================
--创建和备份证书
--在镜像服务器上运行
IF NOT EXISTS (SELECT 1 FROM sys.certificates C WHERE C.Name=‘HOST_3_33_cert‘ )
BEGIN
CREATE CERTIFICATE HOST_3_33_cert WITH SUBJECT =‘HOST_3_33_cert‘,
START_DATE = ‘01/01/2010‘ , EXPIRY_DATE = ‘01/01/2199‘;
END
GO
BACKUP CERTIFICATE HOST_3_33_cert TO FILE=‘D:\HOST_3_33_cert.cer‘
GO

--=========================================================================================================
--创建镜像专用的端点，并使用证书加密
--同一个实例上只能存在一个镜像端点
--在主服务器上运行
IF NOT EXISTS(SELECT * FROM sys.endpoints e WHERE e.[Type]=4)
BEGIN
CREATE ENDPOINT [Endpoint_Mirroring]
STATE=STARTED AS
TCP(LISTENER_PORT=5022)
FOR DATABASE_MIRRORING(AUTHENTICATION=CERTIFICATE HOST_3_32_cert, ENCRYPTION=REQUIRED,ROLE=ALL)
END
GO

--=========================================================================================================
--创建镜像专用的端点，并使用证书加密
--同一个实例上只能存在一个镜像端点
--在主服务器上运行
IF NOT EXISTS(SELECT * FROM sys.endpoints e WHERE e.[Type]=4)
BEGIN
CREATE ENDPOINT [Endpoint_Mirroring]
STATE=STARTED AS
TCP(LISTENER_PORT=5022)
FOR DATABASE_MIRRORING(AUTHENTICATION=CERTIFICATE HOST_3_33_cert, ENCRYPTION=REQUIRED,ROLE=ALL)
END
GO

---------------------------------------------------------------------
--在主服务器上创建登陆和用户以及证书,并授予连接镜像端点的权限
--在主服务器上运行
USE master;
GO
IF NOT EXISTS(SELECT 1 FROM sys.syslogins l WHERE l.[Name] =‘HOST_3_33_login‘)
BEGIN
CREATE LOGIN HOST_3_33_login WITH PASSWORD =‘Auto@sql‘
END
GO
IF NOT EXISTS(SELECT 1 FROM sys.sysusers u WHERE u.[Name]= ‘HOST_3_33_User‘)
BEGIN
CREATE USER HOST_3_33_User FOR LOGIN HOST_3_33_login
END
GO
IF NOT EXISTS(SELECT 1 FROM sys.certificates c WHERE c.[Name]= ‘HOST_3_33_cert‘)
BEGIN
CREATE CERTIFICATE HOST_3_33_cert AUTHORIZATION HOST_3_33_User FROM FILE=‘D:\HOST_3_33_cert.cer‘
END
GO
GRANT CONNECT ON ENDPOINT::[Endpoint_Mirroring] TO HOST_3_33_login
GO

---------------------------------------------------------------------
--在镜像服务器上创建登陆和用户以及证书,并授予连接镜像端点的权限
--在镜像服务器上运行
USE master;
GO
IF NOT EXISTS(SELECT 1 FROM sys.syslogins l WHERE l.[Name] =‘HOST_3_33_login‘)
BEGIN
CREATE LOGIN HOST_3_33_login WITH PASSWORD =‘Auto@sql‘
END
GO
IF NOT EXISTS(SELECT 1 FROM sys.sysusers u WHERE u.[Name]= ‘HOST_3_33_User‘)
BEGIN
CREATE USER HOST_3_33_User FOR LOGIN HOST_3_33_login
END
GO
IF NOT EXISTS(SELECT 1 FROM sys.certificates c WHERE c.[Name]= ‘HOST_3_33_cert‘)
BEGIN
CREATE CERTIFICATE HOST_3_33_cert AUTHORIZATION HOST_3_33_User FROM FILE=‘D:\HOST_3_33_cert.cer‘
END
GO
GRANT CONNECT ON ENDPOINT::[Endpoint_Mirroring] TO HOST_3_33_login
GO

telnet 192.168.3.33 5022

telnet 192.168.3.32 5022

--数据库完整备份和日志备份
BACKUP DATABASE DemoDB TO DISK=‘DemoDB_FULL.BAK‘ WITH COMPRESSION
BACKUP LOG DemoDB TO DISK=‘DemoDB_Log.BAK‘ WITH COMPRESSION

--使用数据库完整备份和日志备份还原
--注意修改还原目录
RESTORE DATABASE DemoDB FROM DISK=‘DemoDB_FULL.BAK‘ WITH NORECOVERY
RESTORE LOG DemoDB FROM DISK=‘DemoDB_Log.BAK‘ WITH NORECOVERY

------------------------------------------------------------------
--从服务器设置镜像
USE [master]
GO
ALTER DATABASE DemoDB SET PARTNER=‘TCP://192.168.3.32:5022‘
GO

------------------------------------------------------------------
--主服务器设置镜像
--如果提示日志不足,请继续备份还原日志
USE [master]
GO
ALTER DATABASE DemoDB SET PARTNER=‘TCP://192.168.3.33:5022‘
GO

------------------------------------------------------------------
--在主服务器上运行
USE [master]
GO
ALTER DATABASE DemoDB SET PARTNER SAFETY OFF
GO