This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 62%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBL%3C/text%3E%3C/svg%3E)
I failed to create availability group in MSSQL 2019 CU22. I found below error in cluster log. Anybody can help?
000020dc.0000112c::2023/10/10-08:15:20.355 INFO [RES] SQL Server Availability Group <AG2>: [hadrag] Connect to SQL Server ...
000020dc.0000112c::2023/10/10-08:15:20.370 ERR [RES] SQL Server Availability Group <AG2>: [hadrag] ODBC Error: [08001] [Microsoft][SQL Server Native Client 11.0]SSL Provider: The certificate chain was issued by an authority that is not trusted.
(590629)
000020dc.0000112c::2023/10/10-08:15:20.370 ERR [RES] SQL Server Availability Group <AG2>: [hadrag] ODBC Error: [08001] [Microsoft][SQL Server Native Client 11.0]Client unable to establish connection (590629)
000020dc.0000112c::2023/10/10-08:15:20.370 INFO [RES] SQL Server Availability Group <AG2>: [hadrag] Could not connect to SQL Server (rc -1)
000020dc.0000112c::2023/10/10-08:15:20.370 INFO [RES] SQL Server Availability Group <AG2>: [hadrag] SQLDisconnect returns following information
000020dc.0000112c::2023/10/10-08:15:20.371 ERR [RES] SQL Server Availability Group <AG2>: [hadrag] ODBC Error: [08003] [Microsoft][ODBC Driver Manager] Connection not open (0)
000020dc.0000112c::2023/10/10-08:15:20.372 ERR [RES] SQL Server Availability Group <AG2>: [hadrag] Failed to connect to SQL Server
000020dc.0000112c::2023/10/10-08:15:20.372 WARN [RHS] Online for resource AG2 failed.
Seems like you should install proper certificates for your instances and then put these certificates in the Trusted Certificates store of the other machines.
But encrypted connection is not enabled. And the certs are the same in both servers.
Yes, but the certificates must be in the Trusted Certificate store.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 89%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Hi @Buddha Li
For the error "The certificate chain was issued by an authority that is not trusted", please refer to this similar thread: https://stackoverflow.com/questions/17615260/the-certificate-chain-was-issued-by-an-authority-that-is-not-trusted-when-conn.
You can also check out this documentation: "The certificate chain was issued by an authority that is not trusted" error after upgrading SNAC applications.
Best regards,
Aniya
Thanks Aniya
But the error messages came from WSFC cluster log, which I think it means the WSFC service cannot connect to the SQL Server.
I already downloaded and installed the latest ODBC and OLEDB for SQL Server drivers.
How can I set the WSFC TrustServerCertificate=True when it connects to SQL Server?