This is my first question so please bear with me !
We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016.
They have AD logins, and these are in a distribution group that has access to the relevant instance.
I've created a Self Certificate, installed it to SQL server and encrypted the connection using it, and even installed it on my laptop (which is off our Domain).
To test the situation I use a local laptop login, VPN to our network, and run SSMS using 'runas /netonly /user.....' with the user being a domain user having the same rights as the remote developers.
When I try to connect I get
A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.)
even though the certificate is trusted.
If I tick
Trust Server Certificate in the SSMS connection options I get "Login failed for user ''"
I'm thinking we need to buy a Certificate - but if anyone has come across a similar situation with a different resolution please let me know !