new-itemproperty -path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name LocalAccountTokenFilterPolicy -Value 1 

--共享文件夾路徑：C:\ClusterStorage\Volume1\ 
--節(jié)點一：創(chuàng)建主密鑰/證書/端點，備份證書。 
USE master; 
GO 
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'kk_testag2016'; 
GO 
CREATE CERTIFICATE Cert_server131 
WITH SUBJECT = 'Cert_server131', 
START_DATE = '2017-01-01',EXPIRY_DATE = '2099-12-30'; 
GO 
BACKUP CERTIFICATE Cert_server131 
TO FILE = 'C:\ClusterStorage\Volume1\Cert_server131.cer'; 
GO 
CREATE ENDPOINT [testag_endpoint] 
 AUTHORIZATION [server131\administrator] 
 STATE=STARTED 
 AS TCP (LISTENER_PORT = 5022, LISTENER_IP = ALL) 
 FOR DATA_MIRRORING 
 (ROLE = ALL,AUTHENTICATION = CERTIFICATE Cert_server131, ENCRYPTION = REQUIRED ALGORITHM AES) 
GO 
--節(jié)點二：創(chuàng)建主密鑰/證書，備份證書。 
USE master; 
GO 
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'kk_testag2016'; 
GO 
CREATE CERTIFICATE Cert_server132 
WITH SUBJECT = 'Cert_server132', 
START_DATE = '2017-01-01',EXPIRY_DATE = '2099-12-30'; 
GO 
BACKUP CERTIFICATE Cert_server132 
TO FILE = 'C:\ClusterStorage\Volume1\Cert_server132.cer'; 
GO 
CREATE ENDPOINT [testag_endpoint] 
 AUTHORIZATION [server132\administrator] 
 STATE=STARTED 
 AS TCP (LISTENER_PORT = 5022, LISTENER_IP = ALL) 
 FOR DATA_MIRRORING 
 (ROLE = ALL,AUTHENTICATION = CERTIFICATE Cert_server132, ENCRYPTION = REQUIRED ALGORITHM AES) 
GO 
--節(jié)點一：創(chuàng)建其他節(jié)點證書 
USE master; 
GO 
CREATE CERTIFICATE Cert_server132 
FROM FILE = 'C:\ClusterStorage\Volume1\Cert_server132.cer'; 
GO 
--節(jié)點二：創(chuàng)建其他節(jié)點證書 
USE master; 
GO 
CREATE CERTIFICATE Cert_server131 
FROM FILE = 'C:\ClusterStorage\Volume1\Cert_server131.cer'; 
GO