How can I enable an encrypted network connection to SQL Server? What have I to do on the client and on the server side?


You can let the operating system take care of it via an IPSEC policy. With SQL Server, you must have a trusted SSL certificate, but here's how: Books Online - How to: Enable Encrypted Connections to the Database Engine.

  • Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password. – Adrian Grigore Oct 28 '11 at 13:11

You can configure via server/client network utilities: http://support.microsoft.com/kb/316898

You still need certificates, and to specify encryption in the connection string. We use an offline CA to generate our certificates using OpenSSL, and then install on the clients and server w/ MMC.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.