Configuring MS SQL Server for forced encryption

Last Updated : Aug 15, 2023 |

About this task

Use this procedure to do the following:

  • Configure the server to accept encrypted connections and use the correct certificate for the Transport Layer Security (TLS) connection.

  • Enable the forced encryption option in MS SQL Server Configuration Manager.

Before you begin

Ensure that you have configured a certificate on your server from System Manager or the third-party CA.

Procedure

  1. Click windows and locate and open Microsoft SQL Server N > SQL Server Configuration Manager where N is the installed version of MS SQL.

    • Alternatively: Press windows+R and enter compmgmt.msc to start Computer Management. Expand Services and Applications and locate SQL Server Configuration Manager.

  2. Expand SQL Server Network Configuration
  3. Right-click Protocols for MSSQLSERVER, and select Properties.
  4. In the Properties window:
    1. On the Flags tab: In the Force Encryption field, click Yes and then click OK.
    2. On the Certificate tab: In the Certificate field, click the required certificate and then click OK.
  5. To apply the changes:, right-click the required MS SQL server and restart the MS SQL Server service.
    1. Click SQL Server Services.
    2. Right-click on the SQL Server and click Restart.