Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I enable an encrypted network connection to SQL Server? What have I to do on the client and on the server side?

share|improve this question

2 Answers 2

up vote 3 down vote accepted

You can let the operating system take care of it via an IPSEC policy. With SQL Server, you must have a trusted SSL certificate, but here's how: Books Online - How to: Enable Encrypted Connections to the Database Engine.

share|improve this answer
    
Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password. –  Adrian Grigore Oct 28 '11 at 13:11

You can configure via server/client network utilities: http://support.microsoft.com/kb/316898

You still need certificates, and to specify encryption in the connection string. We use an offline CA to generate our certificates using OpenSSL, and then install on the clients and server w/ MMC.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.