SQL 2008 encryption

  • I am struggling with encrypting SQL 2008 communications. Background, I have one table in a Database that my client needs to access. I have setup stored procedures to access and all works well, but I need to encrypt the data across the internet. What are the best procedures for this?

    I have created a certificate in the database and have set the User's certificate to the this certificate. All seems well at this point, but I cannot find info on the creating the appropriate connection string to access with encryption.

    Current Connection string is;

    Dim mConnectionString As String = "server= xx.xx.xx.xx;initial catalog=testing;User ID=ABCD;password=ABCD1234#;"

    How do I put certificate information into the connection string.

    Certificate Name: XXXXsecurity, Password "ABCD"

  • You don't want to do this at the database level. It's actually going to be an operating system configuraiton. Basically, you're going to need to install a server certificate that matches the name the clients are using to connect to the SQL Server. So even if internally your SQL Server is known as Charlie, if users are connecting to somesql.mydomain.com, you're going to need the certificate issued for somesql.mydomain.com. Here's a knowledge base article that walks you through what you need to do (and you want to force encryption on the server side to ensure this happens):

    How to enable SSL encryption for an instance of SQL Server by using Microsoft Management Console

    K. Brian Kelley
    @kbriankelley

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply