You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/database-engine/configure-windows/connect-to-the-database-engine-using-extended-protection.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -107,13 +107,13 @@ After enabling **Extended Protection** on the server computer, use the following
107
107
108
108
## Configuring other SQL Server components
109
109
110
-
For more information about how to configure [!INCLUDE [ssRSnoversion](../../includes/ssrsnoversion-md.md)], see [Extended Protection for Authentication with Reporting Services](../../reporting-services/security/extended-protection-for-authentication-with-reporting-services.md).
110
+
For more information about how to configure [!INCLUDE [ssRSnoversion](../../includes/ssrsnoversion-md.md)], see [Extended protection for authentication with Reporting Services](../../reporting-services/security/extended-protection-for-authentication-with-reporting-services.md).
111
111
112
112
When using IIS to access [!INCLUDE [ssASnoversion](../../includes/ssasnoversion-md.md)] data using an HTTP or HTTPS connection, [!INCLUDE [ssASnoversion](../../includes/ssasnoversion-md.md)] can take advantage of Extended Protection provided by IIS. For more information about how to configure IIS to use Extended Protection, see [Configure Extended Protection in IIS 7.5](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee909472(v=ws.10)).
Copy file name to clipboardExpand all lines: docs/database-engine/configure-windows/sql-server-and-client-encryption-summary.md
+10-13Lines changed: 10 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,13 +1,13 @@
1
1
---
2
-
title: SQL Server and client encryption summary
2
+
title: SQL Server and Client Encryption Summary
3
3
description: Learn about the steps required to encrypt all connections to the SQL Server, enable encryption connections from specific clients and check if the encryption works.
4
4
author: suresh-kandoth
5
5
ms.author: sureshka
6
-
ms.reviewer: randolphwest
7
-
ms.date: 12/08/2022
6
+
ms.reviewer: randolphwest, maghan
7
+
ms.date: 05/30/2025
8
8
ms.service: sql
9
9
ms.subservice: configuration
10
-
ms.topic: conceptual
10
+
ms.topic: concept-article
11
11
---
12
12
13
13
# SQL Server and client encryption summary
@@ -18,7 +18,7 @@ This article provides a summary of various scenarios and associated procedures f
18
18
19
19
| Type of certificate | Force encryption in server properties | Import server certificate on each client | Trust Server certificate setting | Encrypt property in the connection string | Comments |
20
20
| --- | --- | --- | --- | --- | --- |
21
-
|[Self-signed certificate - automatically created by SQL Server](special-cases-for-encrypting-connections-sql-server.md#scenario-1-you-want-to-encrypt-all-the-connections-to-sql-server)| Yes | Can't be done | Yes | Ignored |[!INCLUDE [sssql16-md](../../includes/sssql16-md.md)] and earlier versions use the SHA1 algorithm. [!INCLUDE [sssql17-md](../../includes/sssql17-md.md)] and later versions use SHA256. For more information, see [Changes to hashing algorithm for self-signed certificate in SQL Server 2017](https://techcommunity.microsoft.com/t5/sql-server-support-blog/changes-to-hashing-algorithm-for-self-signed-certificate-in-sql/ba-p/319026). We don't recommend this approach for production use. |
21
+
|[Self-signed certificate - automatically created by SQL Server](special-cases-for-encrypting-connections-sql-server.md#scenario-1-you-want-to-encrypt-all-the-connections-to-sql-server)| Yes | Can't be done | Yes | Ignored |[!INCLUDE [sssql16-md](../../includes/sssql16-md.md)] and earlier versions use the SHA1 algorithm. [!INCLUDE [sssql17-md](../../includes/sssql17-md.md)] and later versions use SHA256. For more information, see [Changes to hashing algorithm for self-signed certificate in SQL Server 2017](https://techcommunity.microsoft.com/blog/sqlserversupport/changes-to-hashing-algorithm-for-self-signed-certificate-in-sql-server-2017/319026). We don't recommend this approach for production use. |
22
22
|[Self-signed certificate created by using New-SelfSignedCertificate or makecert - Option 1](special-cases-for-encrypting-connections-sql-server.md#scenario1option1)| Yes | No | Yes | Ignored | We don't recommend this approach for production use. |
23
23
|[Self-signed certificate created by using New-SelfSignedCertificate or makecert - Option 2](special-cases-for-encrypting-connections-sql-server.md#scenario1option2)| Yes | Yes | Optional | Ignored | We don't recommend this approach for production use. |
24
24
| Company's certificate server or from a Certificate Authority (CA) that's not in the [List of Participants - Microsoft Trusted Root Program - Option 1](/security/trusted-root/participants-list)| Yes | No | Yes | Ignored ||
@@ -29,7 +29,7 @@ This article provides a summary of various scenarios and associated procedures f
29
29
30
30
| Type of certificate | Force encryption in server properties | Import server certificate on each client | Specify Trust Server certificate setting on the client | Manually specify encryption property to Yes/True on the client side | Comments |
31
31
| --- | --- | --- | --- | --- | --- |
32
-
|[Self-signed certificate - automatically created by SQL Server](special-cases-for-encrypting-connections-sql-server.md#scenario-2-only-some-clients-need-encrypted-connections-1)| Yes | Can't be done | Yes | Ignored |[!INCLUDE [sssql16-md](../../includes/sssql16-md.md)] and earlier versions use the SHA1 algorithm. [!INCLUDE [sssql17-md](../../includes/sssql17-md.md)] and later versions use SHA256. For more information, see [Changes to hashing algorithm for self-signed certificate in SQL Server 2017](https://techcommunity.microsoft.com/t5/sql-server-support-blog/changes-to-hashing-algorithm-for-self-signed-certificate-in-sql/ba-p/319026). We don't recommend this approach for production use. |
32
+
|[Self-signed certificate - automatically created by SQL Server](special-cases-for-encrypting-connections-sql-server.md#scenario-2-only-some-clients-need-encrypted-connections-1)| Yes | Can't be done | Yes | Ignored |[!INCLUDE [sssql16-md](../../includes/sssql16-md.md)] and earlier versions use the SHA1 algorithm. [!INCLUDE [sssql17-md](../../includes/sssql17-md.md)] and later versions use SHA256. For more information, see [Changes to hashing algorithm for self-signed certificate in SQL Server 2017](https://techcommunity.microsoft.com/blog/sqlserversupport/changes-to-hashing-algorithm-for-self-signed-certificate-in-sql-server-2017/319026). We don't recommend this approach for production use. |
33
33
|[Self-signed certificate created by using New-SelfSignedCertificate or makecert - Option 1](special-cases-for-encrypting-connections-sql-server.md#scenario2option1)| No | No | Yes | Yes | We don't recommend this approach for production use. |
34
34
|[Self-signed certificate created by using New-SelfSignedCertificate or makecert - Option 2](special-cases-for-encrypting-connections-sql-server.md#scenario2option2)| No | Yes | Optional | Yes | We don't recommend this approach for production use. |
35
35
| Company's certificate server or from a CA that's not in the [List of Participants - Microsoft Trusted Root Program](/security/trusted-root/participants-list) - Option 1 | No | No | Yes | Yes ||
@@ -46,16 +46,13 @@ Alternatively, you can check the encryption status of [!INCLUDE [ssnoversion-md]
46
46
1. Execute the following T-SQL command to check the value of `encrypt_option` column. For encrypted connections the value will be `TRUE`.
47
47
48
48
```sql
49
-
SELECT*FROMsys.dm_exec_connections
49
+
SELECT*FROMsys.dm_exec_connections;
50
50
```
51
51
52
-
## See also
52
+
## Related content
53
53
54
54
-[TLS 1.2 support for Microsoft SQL Server](/troubleshoot/sql/database-engine/connect/tls-1-2-support-microsoft-sql-server)
0 commit comments