thanks, that does explain it. when I use the fully qualified domain name as the server name it works without the 'trust server certificate' option. So when the cert was...