• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 238
  • Last Modified:

Server 2012, replication when all hosts are on workgroups, certificate question

I have four physical hosts.  each physical host is on a workgroup.  each physical host holds several VMs.  All of these VMs are on the same domain.

I am trying to set up replication, say from vmhost1 to vmhost3, and from vmhost3 to vmhost1.

As I understand it, I can only do this via certificate based authentication since the hosts are not on the domain.  

The question is, where do I get the cert?  Do I spin up a CA on the domain and issue it and then install it on all of the four servers or do I buy a public cert?

I'm confused about where I get my cert from.


  • 2
1 Solution
Dear Cliff,

A server certificate issued from an AD CA will be enough to get hyperV Replica working.  

From a security standpoint, a certificate issued by a Trusted CA (eg godaddy) will be better.

crp0499CEOAuthor Commented:
But these servers are not on the domain.  they are workgroup servers.  as I understand it, physical hosts are not supposed to be on the domain, so mine are not.

I could spin up a CA on the domain and request one cert, and then install that cert on each server.  would that work?  installing the same cert (just one cert) on all four of my physical hosts?

since all of my physical hosts are on workgroups, if I buy a public cert, do I need one for each server?

Thank you.

If you opt for a public certificate,  you would need one for each server.  

On the other hand, you can set up a domain and install Certificate Services,  issue a server certificate to each HyperV server (in a workgroup) and install the Root CA certificate on each server.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now