Summary

In the Set up a Mirror document it states:

The primary instance and all mirror(s) must have HTTPS with a valid (i.e., signed by a Certificate Authority anchored to the root and not expired) SSL certificate - This is a strict requirement of Smart Mirroring on both the primary instance and all mirror(s), and cannot be bypassed. The mirror setup wizard will not proceed if either the mirror or the primary instance does not have a valid SSL certificate.

This has caused some confusion with some customers as it doesn't seem to clear to them whether or not a self-generated certificate, not sanctioned by a CA, also suffice?

We should update the document to state:

Our recommendation is that all mirrors be given valid SSL certificates signed by a CA anchored to the root, and we cannot offer support for any issue(s) you may encounter by using self-signed or otherwise invalid SSL certificates.