Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I enable an encrypted network connection to SQL Server? What have I to do on the client and on the server side?

share|improve this question
up vote 3 down vote accepted

You can let the operating system take care of it via an IPSEC policy. With SQL Server, you must have a trusted SSL certificate, but here's how: Books Online - How to: Enable Encrypted Connections to the Database Engine.

share|improve this answer
Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password. – Adrian Grigore Oct 28 '11 at 13:11

You can configure via server/client network utilities:

You still need certificates, and to specify encryption in the connection string. We use an offline CA to generate our certificates using OpenSSL, and then install on the clients and server w/ MMC.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.