You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance
Share
Services
## Feature
You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance. With server CA mode, you have two options:
* **Per-instance CA**: this is the default configuration. With this option, an internal CA dedicated to each Cloud SQL instance signs the server certificate for that instance.
* **Shared CA**: with this option, the Cloud SQL instance uses a CA hierarchy consisting of a root CA and subordinate server CAs managed by Cloud SQL and hosted on Google Cloud Certificate Authority Service (CA Service). The subordinate server CAs in a region sign the server certificates and are shared across instances in the region. This option can be used only with MySQL 8.0.30 and later.
For more information about each option, see [Certificate authority (CA) hierarchies](https://cloud.google.com/sql/docs/mysql/authorize-ssl#certificate%5Fauthority%5Fca%5Fhierarchies). This feature is in [Preview](https://cloud.google.com/products#product-launch-stages).