new-itemproperty -path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name LocalAccountTokenFilterPolicy -Value 1 

--共享文件夹路径：C:\ClusterStorage\Volume1\ 
--节点一：创建主密钥/证书/端点，备份证书。 
USE master; 
GO 
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'kk_testag2016'; 
GO 
CREATE CERTIFICATE Cert_server131 
WITH SUBJECT = 'Cert_server131', 
START_DATE = '2017-01-01',EXPIRY_DATE = '2099-12-30'; 
GO 
BACKUP CERTIFICATE Cert_server131 
TO FILE = 'C:\ClusterStorage\Volume1\Cert_server131.cer'; 
GO 
CREATE ENDPOINT [testag_endpoint] 
 AUTHORIZATION [server131\administrator] 
 STATE=STARTED 
 AS TCP (LISTENER_PORT = 5022, LISTENER_IP = ALL) 
 FOR DATA_MIRRORING 
 (ROLE = ALL,AUTHENTICATION = CERTIFICATE Cert_server131, ENCRYPTION = REQUIRED ALGORITHM AES) 
GO 
--节点二：创建主密钥/证书，备份证书。 
USE master; 
GO 
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'kk_testag2016'; 
GO 
CREATE CERTIFICATE Cert_server132 
WITH SUBJECT = 'Cert_server132', 
START_DATE = '2017-01-01',EXPIRY_DATE = '2099-12-30'; 
GO 
BACKUP CERTIFICATE Cert_server132 
TO FILE = 'C:\ClusterStorage\Volume1\Cert_server132.cer'; 
GO 
CREATE ENDPOINT [testag_endpoint] 
 AUTHORIZATION [server132\administrator] 
 STATE=STARTED 
 AS TCP (LISTENER_PORT = 5022, LISTENER_IP = ALL) 
 FOR DATA_MIRRORING 
 (ROLE = ALL,AUTHENTICATION = CERTIFICATE Cert_server132, ENCRYPTION = REQUIRED ALGORITHM AES) 
GO 
--节点一：创建其他节点证书 
USE master; 
GO 
CREATE CERTIFICATE Cert_server132 
FROM FILE = 'C:\ClusterStorage\Volume1\Cert_server132.cer'; 
GO 
--节点二：创建其他节点证书 
USE master; 
GO 
CREATE CERTIFICATE Cert_server131 
FROM FILE = 'C:\ClusterStorage\Volume1\Cert_server131.cer'; 
GO