Sample Header Ad - 728x90

MS SQL Server accepts non-SSL connections even with Force Encryption enabled on the server side

9 votes
3 answers
20090 views
I am forcing encryption on my SQL Server. My intention is to reject any client connection that does not use SSL to connect. Am I on the right track? Here are my detailed steps : * makecert -r -pe -n "CN=slc02xla.company.com" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 c:\my.cer * I imported the same certificate into the trusted Root Certification Authorities Store * In SQL Server Configuration Manager, expandrf SQL Server Network Configuration, right-clicked Protocols for , and then selected Properties. * On the Certificate tab, selected the desired certificate from the Certificate drop-down menu, and then clicked OK. * On the Flags tab, selected Yes in the ForceEncryption box, and then clicked OK to close the dialog box. * Restarted the SQL Server service. Am I missing anything else?
Asked by Codrguy (195 rep)
Oct 26, 2013, 01:14 AM
Last activity: Dec 2, 2024, 09:33 PM