Maintained with ☕️ by
IcePanel logo

You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance

Share

Services

## Feature You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance. With server CA mode, you have two options: * **Per-instance CA**: this is the default configuration. With this option, an internal CA dedicated to each Cloud SQL instance signs the server certificate for that instance. * **Shared CA**: with this option, the Cloud SQL instance uses a CA hierarchy consisting of a root CA and subordinate server CAs managed by Cloud SQL and hosted on Google Cloud Certificate Authority Service (CA Service). The subordinate server CAs in a region sign the server certificates and are shared across instances in the region. For more information about each option, see [Certificate authority (CA) hierarchies](https://cloud.google.com/sql/docs/sqlserver/authorize-ssl#certificate%5Fauthority%5Fca%5Fhierarchies). This feature is in [Preview](https://cloud.google.com/products#product-launch-stages).