Skip to content

Commit 4c65bd2

Browse files
srdan-bozovic-msftrwestMSFT
authored andcommitted
Update driver-feature-matrix.md
Update connect-with-strict-encryption.md Update what-s-new-in-sql-server-2022.md Update certificate-overview.md Update what-s-new-in-sql-server-2022.md Update encryption-and-certificate-validation.md Update release-notes-for-oledb-driver-for-sql-server.md Update protocols-for-mssqlserver-properties-flags-tab.md Update and rename tds-8-and-tls-1-3.md to tds-8.md Create tls-1-3.md Update toc.yml Add files via upload Delete openpublishing.redirection.json Add files via upload Add files via upload Update tds-8.md fix redirect fix redirect
1 parent 7003d5c commit 4c65bd2

11 files changed

Lines changed: 18968 additions & 18936 deletions

File tree

.openpublishing.redirection.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59638,6 +59638,7 @@
5963859638
{
5963959639
"source_path": "docs/relational-databases/errors-events/mssqlserver-53-database-engine-error.md",
5964059640
"redirect_url": "/troubleshoot/sql/connect/network-related-or-instance-specific-error-occurred-while-establishing-connection",
59641+
"redirect_document_id": false
5964159642
},
5964259643
{
5964359644
"source_path": "azure-sql/database/sql-vulnerability-assessment.md",
@@ -59704,6 +59705,11 @@
5970459705
"redirect_url": "/sql/relational-databases/system-tables/msrepl-agent-jobs-transact-sql",
5970559706
"redirect_document_id": false
5970659707
},
59708+
{
59709+
"source_path": "docs/relational-databases/security/networking/tds-8-and-tls-1-3.md",
59710+
"redirect_url": "/sql/relational-databases/security/networking/tds-8",
59711+
"redirect_document_id": false
59712+
},
5970759713
{
5970859714
"source_path": "docs/ssms/object/filter-settings-object-explorer-and-utility-explorer.md",
5970959715
"redirect_url": "/sql/ssms/release-notes-ssms",

docs/connect/driver-feature-matrix.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ We wish all drivers supported every feature and spend effort to ensure feature p
4646
| [Table-Valued Parameters (TVP)](../relational-databases/tables/use-table-valued-parameters-database-engine.md) | [Yes](ado-net/sql/table-valued-parameters.md) | [Yes](ado-net/sql/table-valued-parameters.md) | [Yes](/dotnet/framework/data/adonet/sql/table-valued-parameters) | [Yes](/dotnet/framework/data/adonet/sql/table-valued-parameters) |
4747
| [MultiSubnetFailover](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](ado-net/sql/sqlclient-support-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](ado-net/sql/sqlclient-support-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](/dotnet/api/system.data.sqlclient.sqlconnectionstringbuilder.multisubnetfailover?view=netcore-1.0&preserve-view=true) | [Yes](/dotnet/api/system.data.sqlclient.sqlconnectionstringbuilder.multisubnetfailover?view=netframework-4.8&preserve-view=true) |
4848
| [Transparent Network IP Resolution](odbc/using-transparent-network-ip-resolution.md) | | [Yes](/dotnet/api/microsoft.data.sqlclient.sqlconnection.connectionstring?view=sqlclient-dotnet-1.1&preserve-view=true) | | [Yes](/dotnet/api/system.data.sqlclient.sqlconnection.connectionstring?view=netframework-4.8&preserve-view=true) |
49-
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8-and-tls-1-3.md) | Yes (v5.1+) | Yes (v5.1+) | | |
49+
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8.md) | Yes (v5.1+) | Yes (v5.1+) | | |
5050

5151
| <a id="table2"></a>Feature | [ODBC Driver for SQL Server on Windows](odbc/microsoft-odbc-driver-for-sql-server.md) | [ODBC Driver for SQL Server on Linux and macOS](odbc/microsoft-odbc-driver-for-sql-server.md) | [JDBC Driver for SQL Server](jdbc/microsoft-jdbc-driver-for-sql-server.md) | [OLE DB Driver for SQL Server](oledb/oledb-driver-for-sql-server.md) |
5252
| :-- | :-- | :-- | :-- | :-- |
@@ -66,7 +66,7 @@ We wish all drivers supported every feature and spend effort to ensure feature p
6666
| [Table-Valued Parameters (TVP)](../relational-databases/tables/use-table-valued-parameters-database-engine.md) | [Yes](../relational-databases/native-client-odbc-table-valued-parameters/table-valued-parameters-odbc.md) | [Yes](../relational-databases/native-client-odbc-table-valued-parameters/table-valued-parameters-odbc.md) | [Yes](jdbc/using-table-valued-parameters.md) (v6.0+) | [Yes](oledb/ole-db-table-valued-parameters/table-valued-parameters-ole-db.md) |
6767
| [MultiSubnetFailover](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](jdbc/jdbc-driver-support-for-high-availability-disaster-recovery.md) | [Yes](oledb/features/oledb-driver-for-sql-server-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) |
6868
| [Transparent Network IP Resolution](odbc/using-transparent-network-ip-resolution.md) | [Yes](odbc/using-transparent-network-ip-resolution.md) (v13.0+) | [Yes](odbc/using-transparent-network-ip-resolution.md) (v13.1+) | [Yes](jdbc/setting-the-connection-properties.md) (v6.0+) | [Yes](oledb/features/using-transparent-network-ip-resolution.md) (v18.4+) |
69-
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8-and-tls-1-3.md) | Yes (v18.0+) | Yes (v18.0+) | Yes (v11.2+) | Yes (v19.2+) |
69+
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8.md) | Yes (v18.0+) | Yes (v18.0+) | Yes (v11.2+) | Yes (v19.2+) |
7070

7171
| <a id="table3"></a>Feature | [Drivers for PHP for SQL Server on Windows](php/microsoft-php-driver-for-sql-server.md)<sup>[1](#note1)</sup> | [Drivers for PHP for SQL Server on Linux and macOS](php/microsoft-php-driver-for-sql-server.md)<sup>[1](#note1)</sup> | [Tedious (Node.js)](node-js/node-js-driver-for-sql-server.md) | [pyODBC (Python)](python/pyodbc/python-sql-driver-pyodbc.md)<sup>[1](#note1)</sup> |
7272
| :-- | :-- | :-- | :-- | :-- |
@@ -86,7 +86,7 @@ We wish all drivers supported every feature and spend effort to ensure feature p
8686
| [Table-Valued Parameters (TVP)](../relational-databases/tables/use-table-valued-parameters-database-engine.md) | [Yes](php/use-table-valued-parameters.md) (v5.10+) | [Yes](php/use-table-valued-parameters.md) (v5.10+) | [Yes](https://tediousjs.github.io/tedious/parameters.html) | Yes |
8787
| [MultiSubnetFailover](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) | [Yes](php/php-driver-for-sql-server-support-for-high-availability-disaster-recovery.md) | [Yes](php/php-driver-for-sql-server-support-for-high-availability-disaster-recovery.md) | | [Yes](../relational-databases/native-client/features/sql-server-native-client-support-for-high-availability-disaster-recovery.md#connecting-with-multisubnetfailover) |
8888
| [Transparent Network IP Resolution](odbc/using-transparent-network-ip-resolution.md) | [Yes](php/php-driver-for-sql-server-support-for-high-availability-disaster-recovery.md) | [Yes](php/php-driver-for-sql-server-support-for-high-availability-disaster-recovery.md) | | [Yes](odbc/using-transparent-network-ip-resolution.md) |
89-
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8-and-tls-1-3.md) | Yes (v5.10+) | Yes (v5.10+) | | Yes |
89+
| [TDS 8.0 (strict encryption) and TLS 1.3](../relational-databases/security/networking/tds-8.md) | Yes (v5.10+) | Yes (v5.10+) | | Yes |
9090

9191
<a id="note1"></a><sup>1</sup> Since these drivers rely on the Microsoft ODBC Driver for SQL Server, a version of that driver that supports the feature must also be used.
9292

docs/connect/oledb/features/encryption-and-certificate-validation.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ The following table describes the resulting encryption and validation:
6464
> The preceding table only provides a guide on the system behavior under different configurations. For secure connectivity, ensure that the client and server both require encryption (for server-side configuration, see [Configure encryption settings in SQL Server](../../../database-engine/configure-windows/configure-sql-server-encryption.md#step-2-configure-encryption-settings-in-sql-server)). Also ensure that the server has a verifiable certificate, and that the **`TrustServerCertificate`** setting on the client is set to FALSE.
6565
6666
> [!NOTE]
67-
> Starting from version 19.2 of the OLE DB driver, TDS 8.0 connections can be configured to use TLS 1.3. For more information, see [TLS 1.3 support](../../../relational-databases/security/networking/tds-8-and-tls-1-3.md).
67+
> Starting from version 19.2 of the OLE DB driver, TDS 8.0 connections can be configured to use TLS 1.3. For more information, see [TLS 1.3 support](../../../relational-databases/security/networking/tls-1-3.md).
6868
6969
### Major version 18 with new authentication methods
7070

docs/connect/oledb/release-notes-for-oledb-driver-for-sql-server.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ If you need to download the installer in a language other than the one detected
8484

8585
| Feature added | Details |
8686
| :------------ | :------ |
87-
| Support for TLS 1.3 | TDS 8.0 connections can now be configured to use TLS 1.3. For more details, see [TLS 1.3 support](../../relational-databases/security/networking/tds-8-and-tls-1-3.md). |
87+
| Support for TLS 1.3 | TDS 8.0 connections can now be configured to use TLS 1.3. For more details, see [TLS 1.3 support](../../relational-databases/security/networking/tls-1-3.md). |
8888
| Support for the `Server Certificate` connection string keyword, and the `SSPROP_INIT_SERVER_CERTIFICATE` initialization property | The user may now specify the path to a certificate file to match against the SQL Server TLS/SSL certificate. <br/><br/>For more information, see: [Using connection string keywords](applications/using-connection-string-keywords-with-oledb-driver-for-sql-server.md). |
8989

9090
## 19.1.0

docs/database-engine/configure-windows/certificate-overview.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ Enabling TLS encryption increases the security of data transmitted across networ
2727
- Packets sent from the instance of SQL Server to the application must be encrypted by the server TLS stack and decrypted by the client TLS stack.
2828

2929
> [!IMPORTANT]
30-
> Starting with SQL Server 2016 (13.x), Secure Sockets Layer (SSL) has been discontinued. Use TLS (TLS 1.2 is recommended) instead. For more information, see [KB3135244 - TLS 1.2 support for Microsoft SQL Server](https://support.microsoft.com/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe). SQL Server 2022 introduces support for TLS 1.3. For more information, see [TDS 8.0 and TLS 1.3 support](../../relational-databases/security/networking/tds-8-and-tls-1-3.md).
30+
> Starting with SQL Server 2016 (13.x), Secure Sockets Layer (SSL) has been discontinued. Use TLS (TLS 1.2 is recommended) instead. For more information, see [KB3135244 - TLS 1.2 support for Microsoft SQL Server](https://support.microsoft.com/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe). SQL Server 2022 introduces support for TLS 1.3. For more information, see [TLS 1.3 support](../../relational-databases/security/networking/tls-1-3.md).
3131
> If no matching protocols exist between the client and server computer, you can run into the error described in [An existing connection was forcibly closed by the remote host](/troubleshoot/sql/connect/tls-exist-connection-closed).
3232
3333
## Digital certificate overview
@@ -55,4 +55,4 @@ To prove that a certificate holder is who they claim to be, the certificate must
5555
| --- | --- | --- | --- |
5656
| Certificate subject match | The certificate's **Subject** field contains the common name (CN) of the host. For example, the certificate that's issued to `www.contoso.com` can be used for the web site `https://www.contoso.com`. | - Compatible with all clients, devices, and services.<br /><br />- Compartmentalization. Revoking the certificate for a host doesn't affect other hosts. | - Number of certificates required. You can only use the certificate for the specified host. For example, you can't use the `www.contoso.com` certificate for `ftp.contoso.com`, even when the services are installed on the same server.<br /><br />- Complexity. On a web server, each certificate requires its own IP address binding. |
5757
| Certificate subject alternative name (SAN) match | In addition to the **Subject** field, the certificate's **Subject Alternative Name** field contains a list of multiple host names. For example:<br />`www.contoso.com`<br />`ftp.contoso.com`<br />`ftp.eu.fabirkam.net` | - Convenience. You can use the same certificate for multiple hosts in multiple, separate domains.<br /><br />- Most clients, devices, and services support SAN certificates.<br /><br />- Auditing and security. You know exactly which hosts are capable of using the SAN certificate. | - More planning required. You need to provide the list of hosts when you create the certificate.<br /><br />- Lack of compartmentalization. You can't selectively revoke certificates for some of the specified hosts without affecting all of the hosts in the certificate. |
58-
| Wildcard certificate match | The certificate's **Subject** field contains the common name as the wildcard character (*) plus a single domain or subdomain. For example, `*.contoso.com` or `*.eu.contoso.com`. The `*.contoso.com` wildcard certificate can be used for:<br />`www.contoso.com`<br />`ftp.contoso.com`<br />`mail.contoso.com` | Flexibility. You don't need to provide a list of hosts when you request the certificate, and you can use the certificate on any number of hosts that you may need in the future. | - You can't use wildcard certificates with other top-level domains (TLDs). For example, you can't use the `*.contoso.com` wildcard certificate for `*.contoso.net` hosts.<br /><br />- You can only use wildcard certificates for host names at the level of the wildcard. For example, you can't use the `*.contoso.com` certificate for `www.eu.contoso.com`. Or, you can't use the `*.eu.contoso.com` certificate for `www.uk.eu.contoso.com`.<br /><br />- Older clients, devices, applications, or services might not support wildcard certificates.<br /><br />- Wildcards aren't available with Extended Validation (EV) certificates.<br /><br />- Careful auditing and control are required. If the wildcard certificate is compromised, it affects every host in the specified domain. |
58+
| Wildcard certificate match | The certificate's **Subject** field contains the common name as the wildcard character (*) plus a single domain or subdomain. For example, `*.contoso.com` or `*.eu.contoso.com`. The `*.contoso.com` wildcard certificate can be used for:<br />`www.contoso.com`<br />`ftp.contoso.com`<br />`mail.contoso.com` | Flexibility. You don't need to provide a list of hosts when you request the certificate, and you can use the certificate on any number of hosts that you may need in the future. | - You can't use wildcard certificates with other top-level domains (TLDs). For example, you can't use the `*.contoso.com` wildcard certificate for `*.contoso.net` hosts.<br /><br />- You can only use wildcard certificates for host names at the level of the wildcard. For example, you can't use the `*.contoso.com` certificate for `www.eu.contoso.com`. Or, you can't use the `*.eu.contoso.com` certificate for `www.uk.eu.contoso.com`.<br /><br />- Older clients, devices, applications, or services might not support wildcard certificates.<br /><br />- Wildcards aren't available with Extended Validation (EV) certificates.<br /><br />- Careful auditing and control are required. If the wildcard certificate is compromised, it affects every host in the specified domain. |

docs/relational-databases/security/networking/connect-with-strict-encryption.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ In this article, we'll show you how to connect to [!INCLUDE [sssql22-md](../../.
2828

2929
## Connect to SQL Server using a .NET application
3030

31-
For information on building and connecting to SQL Server using the `strict` encryption type, see [Connection String Syntax](/dotnet/framework/data/adonet/connection-string-syntax) on how to properly build the connection string. For more information on the new connection string properties, see [Additional changes to connection string encryption properties](./tds-8-and-tls-1-3.md#additional-changes-to-connection-string-encryption-properties).
31+
For information on building and connecting to SQL Server using the `strict` encryption type, see [Connection String Syntax](/dotnet/framework/data/adonet/connection-string-syntax) on how to properly build the connection string. For more information on the new connection string properties, see [Additional changes to connection string encryption properties](./tds-8.md#additional-changes-to-connection-string-encryption-properties).
3232

3333
## Connect using an ODBC DSN
3434

@@ -90,4 +90,4 @@ If you see `SSL certificate validation failed`, validate that:
9090

9191
## See also
9292

93-
- [TDS 8.0 and TLS 1.3 support](tds-8-and-tls-1-3.md)
93+
- [TDS 8.0](tds-8.md)

0 commit comments

Comments
 (0)