Windows Forum

Ask something
Discussion Locked

SQL Server and SSL Encryption

0 helpful
2 replies

by rcwalters

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have SQL Server 2000 running on NT4.0 Server SP6a. I installed Certificate Server from the NT Option Pack.

I want to talk ODBC from clients to the server, encrypted with SSL. Supposedly this is supported by checking the Force Protocol Encryption option on SQL Server. My problem is, when I do that, the SQL service will not start--the error is something to the effect of, "Encryption requested but cannot find valid certificate. " Why the heck can't it find a valid certificate? I also have IIS 4.0 on this same machine, went through all the Technets on how to assign a certificate to IIS, and it works great from browser-to-webserver. SQL Server just doesn't see a valid certificate .

2 replies

by estebandelatorre

This is the most common way that these mix works.
Users start an ssl session to the web server. The web server start odbc session with the local or remote sql server. The sql server must be configured to use multiprotocol or names pipes only.
If you have multiple odbc sessions, consider microsoft transaction server in order to minimize memory consumption and keep track of connections.
If your sql server is in the same machine as your web server, allways remove the xp_command shell in order to not get hacked
If you use names pipes (like ipx) it will not
cross your router. Also disable netbios.

This discussion is closed to new replies.