Active/Active Cluster Encryption

Can anyone give me some tips on enabling encryption on an active/active
cluster? the particulars as I understand them:
1. Encryption is enabled on each node, and
2. Each nodes encryption is based on a certificate from Certificate
services
3. Certificate services that must be installed on the node
4. and the certificate is tied to the node name
5. After failover, decryption for the newly acquired resources would fail
because the certificate would not be valid.
What am i missing?
Our situation is that we have various columns spread throughout our
databases that need to be encrypted (they may contain SSN's for example).
We don't intend to encrypt entire tables or databases.
Thanks for your ideas!
You need to have the certificate issued to the FQDN of the virtual server
and install it on all nodes. Then the service master key gets encrypted
with that cert and the rest of the chain works just fine.
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP
"Steve" <steve.schneider1@.comcast.net> wrote in message
news:unuv%23spVHHA.4028@.TK2MSFTNGP04.phx.gbl...
> Can anyone give me some tips on enabling encryption on an active/active
> cluster? the particulars as I understand them:
> 1. Encryption is enabled on each node, and
> 2. Each nodes encryption is based on a certificate from Certificate
> services
> 3. Certificate services that must be installed on the node
> 4. and the certificate is tied to the node name
> 5. After failover, decryption for the newly acquired resources would fail
> because the certificate would not be valid.
> What am i missing?
> Our situation is that we have various columns spread throughout our
> databases that need to be encrypted (they may contain SSN's for example).
> We don't intend to encrypt entire tables or databases.
> Thanks for your ideas!
>

Active / Active Cluster SQL Query

I have a SQL Server 2000 with SP3 in a Active / Active
Cluster. I would like to write a SQL query to receive
database table data from the other side of the Active
cluster.
Node A - Virtual Server Name: HGFOPKLD\ERT - Database
Name: NewOrleans_Sales - Table - June_2004
Node B - Virtual Server Name: JKLOPGHF\ERT - Database
Name: NewOrleans_Capital - Table - June_2004
I would like to write a query to select data from
NewOrleans_Sales..June2004 to NewOrleans_Capital..Jun2004.
Listed below is an outline of time intervals for this
failure.
Select Sold_date, Value from NewOrleans_Capital..Jun2004
FROM NewOrleans_Sales..June2004.
Please help me with this query, do I need create a linked
server between two servers?
Thanks!
Mark
You need to create a linked server to access remote data. Use either the
OpenQuery function or the four-part name convention. Accessing a clustered
instance from another clustered instance is no different than accessing any
remote SQL server from a local SQL server.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Mark" <anonymous@.discussions.microsoft.com> wrote in message
news:0c1001c48b81$98b494f0$a401280a@.phx.gbl...
> I have a SQL Server 2000 with SP3 in a Active / Active
> Cluster. I would like to write a SQL query to receive
> database table data from the other side of the Active
> cluster.
> Node A - Virtual Server Name: HGFOPKLD\ERT - Database
> Name: NewOrleans_Sales - Table - June_2004
> Node B - Virtual Server Name: JKLOPGHF\ERT - Database
> Name: NewOrleans_Capital - Table - June_2004
> I would like to write a query to select data from
> NewOrleans_Sales..June2004 to NewOrleans_Capital..Jun2004.
> Listed below is an outline of time intervals for this
> failure.
> Select Sold_date, Value from NewOrleans_Capital..Jun2004
> FROM NewOrleans_Sales..June2004.
> Please help me with this query, do I need create a linked
> server between two servers?
> Thanks!
> Mark
>
>
>

Active / Active 2000 cluster.

I'm looking at MSFT press book for SQL 2005 and they say and active / active
cluster needs two virtual server names.
Can anyone confirm or deny if this is true for SQL 2000?
you also need two virtual server names (= two instances) for SQL 2000
active / active means one virtual server (instance) runs on one node, while
the other virtual server (instance) runs on the other node. Each one of
these instances are running their own set of databases.
HTH,
_Edwin.
"SQLdba" <burt_king@.yahoo.com> wrote in message
news:4AF9E22F-4C5A-4948-AE2E-E325FAD54C7C@.microsoft.com...
> I'm looking at MSFT press book for SQL 2005 and they say and active /
active
> cluster needs two virtual server names.
> Can anyone confirm or deny if this is true for SQL 2000?
|||Confirmed.
Each instance in a multi-instance cluster requires a separate virtual server
name, IP address and disk resource. This is true in SQL 2000 and 2005.
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP
"SQLdba" <burt_king@.yahoo.com> wrote in message
news:4AF9E22F-4C5A-4948-AE2E-E325FAD54C7C@.microsoft.com...
> I'm looking at MSFT press book for SQL 2005 and they say and active /
> active
> cluster needs two virtual server names.
> Can anyone confirm or deny if this is true for SQL 2000?
|||Edwin, Geoff, thanks!!!
"Edwin vMierlo" wrote:

> you also need two virtual server names (= two instances) for SQL 2000
> active / active means one virtual server (instance) runs on one node, while
> the other virtual server (instance) runs on the other node. Each one of
> these instances are running their own set of databases.
> HTH,
> _Edwin.
>
> "SQLdba" <burt_king@.yahoo.com> wrote in message
> news:4AF9E22F-4C5A-4948-AE2E-E325FAD54C7C@.microsoft.com...
> active
>
>
|||Don't forget if one node goes down, you have 2 sql instances on 1 node.
Keep performance in mind!
Active/passive is the bomb...
I drank alot of beer and ended up in the police department database.
Drank more beer and learned SQL in the dark hours.
DELETE FROM offenders WHERE Title=''MrAA'' AND Year=2006;
I love SQL
"SQLdba" wrote:

> I'm looking at MSFT press book for SQL 2005 and they say and active / active
> cluster needs two virtual server names.
> Can anyone confirm or deny if this is true for SQL 2000?