I have followed http://support.microsoft.com/kb/316898 to force encryption on my MS SQL server. My intention is to reject any client connection that does not use SSL to connect. Am I on the right track?

Here is my detailed steps :

  • makecert -r -pe -n "CN=slc02xla.company.com" -b 01/01/2000 -e 01/01/2036 -eku -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 c:\my.cer
  • I imported the same certificate into the trusted Root Certification Authorities Store
  • In SQL Server Configuration Manager, expandrf SQL Server Network Configuration, right-clicked Protocols for , and then selected Properties.
  • On the Certificate tab, selected the desired certificate from the Certificate drop-down menu, and then clicked OK.
  • On the Flags tab, selected Yes in the ForceEncryption box, and then clicked OK to close the dialog box.
  • Restarted the SQL Server service.
  • Anything missing?

    closed as unclear what you're asking by Jon Seigel, Mark Storey-Smith, Taryn, Michael - sqlbot, Mike Walsh Oct 28 '13 at 23:24

    Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


    Assuming you are using the Force Protocol Encryption option in SQL Server Configuration Manager for the server then nothing but SSL will work (assuming you have a certificate configured).

    Clearly, the only way to know is to test. Use SSMS or SQLCMD to attempt a connection that does NOT use SSL. If it connects, you have done something wrong.

    • i cannot format my comment, please see my edited question. thanks – Codrguy Oct 26 '13 at 0:50

    Not the answer you're looking for? Browse other questions tagged or ask your own question.