Configuring MS SQL Server for forced encryption

Last Updated : Aug 15, 2023 |
Prolog information
Metadata
Keywords:
Use this procedure to do the following:
  • Configure the server to accept encrypted connections and use the correct certificate for the Transport Layer Security (TLS) connection.
  • Enable the forced encryption option in MS SQL Server Configuration Manager to ensure that only secured connections are used for all communications.
Before you begin
Ensure that you configure a certificate on your server from System Manager or the third-party CA.
  1. To open SQL Server Configuration Manager, run the .msc file from the command line or load it using the Microsoft Management Console on Windows.
    ADDITIONAL INFORMATION:
    Alternatively, to find SQL Server Configuration Manager, click Control PanelAdministrative ToolsComputer Management, and expand the Services and Routing folder.
  2. In SQL Server Configuration Manager, right-click SQL Server Network ConfigurationProperties.
  3. In the Properties window, click the Flags tab.
  4. In Force Encryption, click Yes, and click OK.
  5. Click the Certificate tab.
  6. In Certificate, click the required certificate, and click OK.
  7. To apply the changes, right-click the required MS SQL server and restart the MS SQL Server service.