Brand new Azure account. Created a vnet ( and an SQL DB/Server (no AD, just an admin login: sadmin/***)

Using SSMS, I can connect the SQL server through its public endpoint (prompted for Azure login by SSMS. FW rule added on-the-fly) ✔

Now, I'm trying to connect through a private endpoint:

  • Created a VNet gateway and OpenVPN access: I am now connected to my vnet using OpenVPN ✔

  • Connected the SQL server to the VNet using a private endpoint (

  • Access to server through Azure resources enabled. No specific FW rules.

Using SSMS (on my computer) and SQL Server authentication (sadmin/***), I can connect the SQL server but login fails:

A connection was successfully established with the server, but then an
error occurred during the login process. (provider: SSL Provider,
error: 0 - The target principal name is incorrect.) (Microsoft SQL Server, Error: -2146893022)

Also, telnet 1433 connects, which confirms the message above about successful connection.

Same error message even if I use a wrong password or username.

Note: I reset the sadmin password (through the portal) to make sure I use the correct password.

What's wrong? Note: I am neither a SQL server specialist nor a DBA. I may miss the obvious.

  • have you added that IP in the firewall rules?
    – Sajeetharan
    May 2 '20 at 14:01

If you're using DTU based, try to upgrade a little bit. E.g. 100 DTU

  • How can this be related ? That would mean I have to pay more to be able to connect my server from a private point !? May 3 '20 at 15:31
  • @SergeWautier I've faced problems when trying to connect to SQL Database and it turns out someone created it with 50 DTU or so. I don't think it's a VNET or VPN problem but as I don't have access to the environment, I just shared this based on my previous experiences.
    – Thiago Custodio
    May 3 '20 at 17:09

First verify the name of the Azure SQL Server is correct and the name of the database is correct. You should specify the name of the server (.database.windows.net) on the "Connect to server" dialog of SSMS and on the "Options" button, on the "Connect to database" field please provide the name of the database.

Now let's start by testing basic connectivity using the current IP of your Azure SQL Database server. Let's ping the name of the Azure SQL server. The ping will fail but it should also return the current IP of the SQL Azure Server if DNS resolution is working.

C:\>ping <myserver>.database.windows.net

Pinging data.sn1-1.database.windows.net [] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)

Now try to telnet to port 1433 using the IP address returned.

C:\>telnet 1433

Connecting To

If Telnet is successful, the window will change to a completely blank screen. Try connecting with that IP using SSMS again. If telnet is not successful, try tracert or traceroute to identify at what step it fails to reach the Azure SQL Database server.


Tracing route to over a maximum of 30 hops
1 2 ms 1 ms 1 ms
2 6 ms 5 ms 5 ms
3 5 ms 4 ms 5 ms 4-1-753.DLLSTX-LCR-07.verizon-gni.net []
4 8 ms 5 ms 5 ms so-6-2-0-0.DFW01-BB-RTR1.verizon-gni.net []
5 44 ms 43 ms 44 ms so-11-0-0-0.LCC1-RES-BB-RTR1-RE1.verizon-gni.net []
6 49 ms 44 ms 44 ms so-6-0-0-0.ASH-PEER-RTR1-re1.verizon-gni.net []
  • Thnaks for your reply. you're mentioning the public hostname, which works (of course until I disabled it). I'm trying to access through the private endpoint. May 3 '20 at 15:29
  • You need to always use that name because the IP of your server can vary at any time. May 3 '20 at 19:59

You need to trust server certificate when connecting via IP address

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.