Skip to content

Commit a65a61c

Browse files
authored
Merge pull request #190903 from juanandmsft/patch-7
Can I change DNS zone prefix? update
2 parents 0841143 + 3f3bff8 commit a65a61c

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

articles/azure-sql/managed-instance/frequently-asked-questions-faq.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -145,11 +145,13 @@ sections:
145145
146146
### Can I change DNS zone prefix?
147147
148-
Yes, Managed Instance default DNS zone *.database.windows.net* can be changed.
148+
Yes, Managed Instance default DNS zone *.database.windows.net* can be changed with your own. However, Managed Instance hostname part of its FQDN should remain the same.
149149
150150
To use another DNS zone instead of the default, for example, *.contoso.com*:
151-
- Use CliConfig to define an alias. The tool is just a registry settings wrapper, so it can be done using group policy or a script as well.
152-
- Use *CNAME* with the *TrustServerCertificate=true* option.
151+
- Use SQL Server Client Network Utility (CliConfg) to define an alias. You can use either just the Managed Instance hostname, or the Managed Instance hostname followed by a custom domain name. The CliConfg tool just adds alias in the registry under "HKLM\SOFTWARE\Microsoft\MSSQLServer\Client\ConnectTo" or "HKLM\SOFTWARE\WOW6432Node\Microsoft\MSSQLServer\Client\ConnectTo" depending if you use the 64-bit version (C:\Windows\System32\cliconfg.exe) or the 32-bit version (C:\Windows\SysWOW64\cliconfg.exe), so it can be done using group policy or a script as well. Use both to ensure 32-bit and 64-bit programs can resolve the alias.
152+
- Use *CNAME* record in DNS with Managed Instance hostname pointing to Managed Instance FQDN. In this case, TrustServerCertificate=TRUE is needed when using Azure AD authentication.
153+
- Use *A* record in DNS with Managed Instance hostname pointing to Managed Instance IP address. **Using IP address is not recommended**, as it may change without notice. In this case, TrustServerCertificate=TRUE is needed when using Azure AD authentication.
154+
153155
154156
- question: |
155157
Migration options

0 commit comments

Comments
 (0)