TechBubbles Microsoft Technology BLOG

SSL Encryption in SQL Server

 

This post discuss about security of SQL Server data and  steps required to configure SSL Encryption in SQL Server. There is a feature named Transparent Data Encryption in SQL server 2008 which provides security for static data, what about the data that flows over the network. SSL Encryption can answer this question.

What is SSL Encryption?

Secure Sockets Layer(SSL) encryption encrypts network traffic between the clients and server. This feature was introduced long back in SQL version 2000. Enabling SSL encryption increases the security of data transmitted between instances of SQL Server and applications.

Encryption is useful when client connects to the SQL Server over internet and when data transfers over public networks.

To use SSL encryption, you need to buy a certificate from a trusted certificate authority and then install and configure it in SQL Server.

You can see the transferring data over network using Net monitor tool when some one sends a request to SQL Server.

image

When there is no SSL encryption on SQL Server then any one can see the data over network.

Configuring SSL Encryption in SQL Server

This configuration is on SQL Server 2008 R2 and operating system is Windows Server 2008 R2.

Add certificate services if it is not already installed on the server by going to server manager as shown below

image

image

click next and leave the default settings and click install button

image

Now you can browse localhost/certserv in internet explorer then you will see the below screen

image

click on download CA certificate and send a separate request for server side and install

image

After installing the certificate, open SQL Server Configuration Manager and right click protocols then select properties

image

In properties window set the Force Encryption to Yes

image

Under Certificate tab, select the certificate that you have installed

image

Once the above steps are complete, restart the SQL Server service.

Now re-run the Netmon tool then you will notice the data got encrypted.

image

reference Channel 9 show

Share this post :

About the author

Kalyan Bandarupalli

My name is kalyan, I am a software architect and builds the applications using Microsoft .NET technologies. Here I am trying to share what I feel and what I think with whoever comes along wandering to Internet home of mine.I hope that this page and its contents will speak for me and that is the reason I am not going to say anything specially about my self here.

Add Comment

TechBubbles Microsoft Technology BLOG

Follow me

Archives

Tag Cloud