Skip to main content

Questions tagged [certificate]

A container for a private and public key pair that includes additional meta-data / properties. Certificates are typically used for encryption as well as generating and validating signatures (e.g. module signing, message verification, etc).

Filter by
Sorted by
Tagged with
2 votes
2 answers
1k views

Is it possible to register two SSL certificates on SQLServer?

In SQLServer 2019, is there a way to install multiple SSL certificates in parallel? I have the following situation: The division the server belongs to was sold and therefore new DNS aliases were ...
Christoph's user avatar
  • 123
0 votes
1 answer
59 views

SQL Certificate

Recently, I was asked to apply SSL certs to SQL. After a bit of research, I found an article to add the server cert to SQL using the SQL Server Configuration Manager. When the server cert expires our ...
AnthonyPoirrier's user avatar
0 votes
1 answer
19 views

Does the client certificate need to be signed by the server certificate?

I am connecting to a GCP Cloud SQL instance using a client certificate issued by the GCP Cloud SQL service. When I created the client key-pair GCP Cloud SQL gave me three files: a server certificate, ...
rlandster's user avatar
  • 375
1 vote
1 answer
226 views

Module signing on a trigger which accesses system views. Base table is on a custom schema

Some background: Question is follow up of this question: Is there a way in SQL Server to make a table only able to insert by trigger? I'm trying to achieve what the answer to the original question ...
Stackoverflowuser's user avatar
3 votes
2 answers
805 views

Is self signed cert the standard practice for SQL Server Always Encrypted?

We're implementing SQL Server Always Encrypted in our 2019 environment. We've done several successful POC's over the last few months, but in moving the solution to Prod, I was expecting to use a ...
Emo's user avatar
  • 143
2 votes
0 answers
143 views

How to use Custom Certificate for SQL Server Availability Group Endpoint Authentication

I am setting up a SQL Server Availability Group using the commands provided in the Microsoft documentation. The process involves creating a certificate, backing it up with the private key, and ...
Neaj Morshad's user avatar
1 vote
1 answer
2k views

No connection possible after TrustServerCertificate=True => The certificate chain was issued by an authority that is not trusted

I have a machine which could connect to an MS SQL Server in the past. I have SSMS installed and the connection was possible when I activated TrustServerCertificate checkbox in SSMS. I could connect ...
Sebastian Siemens's user avatar
0 votes
0 answers
114 views

Cannot send mail through SQL Server sp_send_dbmail. Certificate error

Below is the error message I see in windows event log. No errors while executing sp_send_dbmail Exception Information =================== Exception Type: Microsoft.SqlServer.Management.SqlIMail....
mk SQL's user avatar
  • 5
0 votes
0 answers
802 views

64 bit ODBC connection fails due to certificate not being trusted

I am setting up 32 and 64 bit ODBC connections on 2 identical SQL Servers running SQL 2019 CU18. These are part of the same cluster with AOAG. The primary node gave no problems with 32 or 64 bit ...
DBA Greg14's user avatar
0 votes
1 answer
1k views

Does server SSL certificate update require SQL Service restart

This seems like such a basic question but I'm not finding it anywhere else on the site so apologies in advance if this is a repeat. Some co-workers and I are trying to determine if a restart of the ...
inkswamp's user avatar
0 votes
2 answers
82 views

Always Encrypt C++

Our client application is developed in C++ and uses ODBC Driver (Version 17) to connect to remote SQL database. We have enabled Always Encrypt option to encrypt the data. Using proper flags in ...
Amal Jesudas's user avatar
2 votes
2 answers
2k views

Renew Certificate in Oracle Enterprise Cloud Control OMS Manager Console

Environment: Oracle Enterprise Manager Cloud Control 13.4 OMS console with third party certificate Secured My situation is the following: I am new in this client and apparently the former DBA added ...
Roberto Hernandez's user avatar
1 vote
1 answer
536 views

How to automatically add TLS certificates to Oracle wallets?

When accessing external webservices via HTTPS via the Oracle database you need to add the corresponding certificate to a database wallet to prevent a certificate validation error. When one creates an ...
WayneNani's user avatar
  • 113
0 votes
0 answers
1k views

PostgreSQL connection accepted without providing SSL certificates

Hopefully someone might be able to shed a light on this problem. I've configured two servers, both of them have the same problem. I've implemented SSL configuration, on PostgreSQL 11.18, I have ...
David Salas's user avatar
1 vote
1 answer
2k views

MySQL Server Cannot Verify SSL Certificate

I'm trying to configure a mysql server for secure remote connections over TCP/IP using SSL. The server mysql runs on has a domain name associated with it which i have requested a certificate for from ...
meshachviktor's user avatar
3 votes
1 answer
836 views

Cross database access with trustworthy on does not work for service account neither with certificate

I have this setup I created two databases (source and target). Source database has stored procedure that is accessing table in target database. Stored procedure is executed as service account Service ...
Muflix's user avatar
  • 1,109
1 vote
1 answer
3k views

Understanding of database master key in SQL Server

Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
Fajela Tajkiya's user avatar
0 votes
0 answers
393 views

Generate MySQL/MariaDB SSL certificates from my wildcard certificate (*.mycompany.com)

I'm configuring a series of MariaDB servers with SSL protection. I was able to do it creating different self-signed certificates, as everybody can do just following some of the multiple tutorials you ...
Gonzalo Cao's user avatar
4 votes
1 answer
183 views

Is an SSL Certificate Authority Chain "Secret"

We've recently signed up to use MariaDB's SkySQL package, however are new to the use of SSL Certificate Chains when connecting (having only really used SSH tunnels in the past). We have the key which ...
IQJWSB0DLT's user avatar
2 votes
1 answer
920 views

How do I generate the private key needed to restore the encrypted backup?

I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
Ronaldo's user avatar
  • 5,636
0 votes
1 answer
3k views

Unable to load user-specified certificate in event log although SSL certificate is installed

Unable to load user-specified certificate [Cert Hash(sha1) "SOMERANDOMHASH"]. The server will not accept a connection. You should verify that the certificate is correctly installed. See &...
Sayaman's user avatar
  • 211
2 votes
1 answer
2k views

SQL Server Profiler - Client unable to establish connection

Spanking brand-new installations of: Visual Studio 2022 Community (VS) SQL Server 2019 Dev (SQL) SQL Server Management Studio v18.10 (SSMS) There are no other Visual Studio or SQL Server instances ...
David Rogers's user avatar
0 votes
1 answer
2k views

Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry

I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019) I have a certificate with SHA1 algorithm on a server that is not expired. **When sql server started I can clearly see ...
Serdia's user avatar
  • 697
1 vote
1 answer
354 views

If I backup my Certificates, why do I need to backup the DMK?

If I have a server where I use TDE, configured as follows: USE [master] CREATE DATABASE MyTDE CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455'; CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
SE1986's user avatar
  • 2,000
4 votes
1 answer
1k views

Load assembly from a certificate in SQL Server

We received an assembly from external vendor as CREATE ASSEMBLY MYCALC_DLL AUTHORIZATION dbo FROM 0x42A728....<300,000 binary values> WITH PERMISSION_SET = UNSAFE GO And this DLL is been ...
Kris's user avatar
  • 432
0 votes
1 answer
527 views

Supported RSA Key Lengths for Encrypted SQL Connections

I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
Davin Studer's user avatar
2 votes
1 answer
2k views

Azure Data studio - connection to server in the same network - Error: The received certificate has expired

I am trying to connect to SQL server on my network with Azure Data Studio, and I am getting error: A connection was successfully established with the server, but then an error occurred during the ...
Marko Skokovic's user avatar
0 votes
1 answer
238 views

SQL Mirroring Replace Certificates

I have inherited two SQL 2016 servers with two mirrored databases. They have been built with certificates as they are in a workgroup, the certs expire in six months. I am trying to understand the ...
Stockburn's user avatar
  • 431
3 votes
1 answer
2k views

Changing Database Encryption Keys

I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
Tall Paul Huebner's user avatar
4 votes
1 answer
5k views

Database master key and certificate for backup encryption - SQL Server

I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows: USE master; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!'; GO ...
user1930901's user avatar
0 votes
0 answers
160 views

Azure Elastic Job step to a privatelink sqldatabase target fails with "target principal name is incorrect" (Trust Server Certificate works in SSMS)

My first Elastic Job Agent jobstep to a privatelink sqldatabase target fails with "target principal name is incorrect." I can connect to servername.privatelink.database.windows.net and the ...
Bobogator's user avatar
0 votes
1 answer
1k views

How to query which users are using which certificates in SQL Server?

I would like to know which users a certificate is used by. I tried to do this query but got no results: SELECT master.sys.sql_logins.name, sys.certificates.name FROM master.sys....
A X's user avatar
  • 155
0 votes
1 answer
774 views

Install PFX certificate on SQL 2008 R2

We have a MS SQL 2008 R2 service running on a Windows 7 computer. I've developed a webapplication that runs on a Digital Ocean droplet. This droplet makes a connection with this computer through a ...
Stijn Leenknegt's user avatar
2 votes
1 answer
7k views

How to configure TCPS in JDBC thin client for oracle

An Java Application running with JDBC thin wtih TCP connection, Now require is to convert in TCPS for encryption transmission from application to database. String url = "jdbc:oracle:thin:@(...
Nullpointer's user avatar
3 votes
1 answer
803 views

What Microsoft DBA certificate should I acquire?

I am thinking about getting Microsoft DBA certification, but trying to find out which exactly certificate should I study for gets a little confusing. My company uses on premises SQL Server 2017 but ...
Serdia's user avatar
  • 697
3 votes
2 answers
1k views

Why would I download CA certificate when starting a managed Postgres cluster on DigitalOcean?

I am trying for the first time a Postgres cluster provided as a managed service by DigitalOcean.com. As part of configuring the new cluster, their web interface gives me a user name, password, port ...
Basil Bourque's user avatar
0 votes
1 answer
2k views

psql command, how to enforce certificate check?

I have created a cockroachdb v20.1.0 cluster based on this: https://www.cockroachlabs.com/docs/stable/deploy-cockroachdb-on-premises.html I have also created a test user like this: CREATE USER test ...
nagylzs's user avatar
  • 411
2 votes
1 answer
3k views

How to get certificate expiration date for certificate in mirroring endpoint in SQL Server 2016 Always On Availability Group?

I created a domain-independent 2-node SQL Server 2016 Always On Availability Group using the Microsoft instructions: https://learn.microsoft.com/en-us/sql/database-engine/availability-groups/windows/...
A X's user avatar
  • 155
0 votes
1 answer
143 views

Recreate a Certifcate Encrypted by Password to another database

I have created a stored procedure which requires permissions across a number of databases: USE MyDB; CREATE PROCEDURE dbo.MyProc ( @ScheduleName NVARCHAR(260), @KeepSchedule BIT = 0 ) AS ...
SE1986's user avatar
  • 2,000
0 votes
2 answers
9k views

need help understanding the error-message: Error Connecting to database FATAL : no pg_hba.conf entry

We're trying to connect to a postgres/postgis installation on a remote server, using QGIS-Application. When accessing from another pc or from the same pc via pgadmin4v4 with the same credential/...
xof's user avatar
  • 25
0 votes
1 answer
1k views

SQL Server - Add signature to stored procedure by certificate does not work

I have a stored procedure in Database 1 that updates couple of tables in Database 1 and Database 2 To avoid granting calling login/user permissions to do table updates, I would like to use code ...
Aleksey Vitsko's user avatar
0 votes
1 answer
602 views

SQL Server MCSA Database Administration Certification retires on June 30, 2020 - is there going to be a replacement? [closed]

Looking at exams 70-764 and 70-765 This exam retires on June 30, 2020. A replacement exam may be available. To learn more, visit our blog: https://www.microsoft.com/en-us/learning/community.aspx ...
Aleksey Vitsko's user avatar
1 vote
1 answer
850 views

SQL Server Encrypted Connections - Configuration Manager does not see Certificate

My goal is to implement encrypted connections on Test SQL Server instance First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
Aleksey Vitsko's user avatar
0 votes
0 answers
1k views

Setup certification for SQL Server running on Debian

I have successfully setup an instance of a SQL Server 2017 instance on the latest Debian release, and a domain that points to that server, and I have gotten the respective certificates by using ...
ccoutinho's user avatar
  • 166
0 votes
0 answers
226 views

SQL Server - How to know to which database user certificate is mapped to?

Inside a user database, I have two certificates, both are used for signing stored procedures First cert was created long time ago by someone Second I created myself for testing purposes For ...
Aleksey Vitsko's user avatar
1 vote
2 answers
1k views

SSMS login by external developers

This is my first question so please bear with me ! We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016. They have AD logins, and these are ...
Waster's user avatar
  • 11
2 votes
1 answer
14k views

How to generate a self-signed SSL certificate for MS SQL server 2008 R2 using OpenSSL?

Using OpenSSL, I'd like to generate a self-signed certificate for usage with Microsoft SQL server 2008 R2. This might be unusual, but I'd like to learn what's going on behind the scenes. I have ...
Binarus's user avatar
  • 131
0 votes
1 answer
345 views

Grant User permission to view XE results via sys.fn_xe_file_target_read_file

I need to grant a user (MyDomain\JohnSmith) permission to view one particular XE session results using sys.fn_xe_file_target_read_file I thought the best way to do this would be to encapsulate the ...
SE1986's user avatar
  • 2,000
6 votes
1 answer
463 views

Permissions issue in Docker SQL Server 2017 while restoring certificate

Docker SQL Server 2017 container @latest. Using master database. The error I am facing is the following: [S00019][15208] The certificate, asymmetric key, or private key file is not valid or does not ...
Chaim Eliyah's user avatar
2 votes
1 answer
2k views

SQL Server Encryption with "localhost" certificate

Using SQL Server 2014/2016: I'm trying to encrypt my connections from my application to my local SQL Server instance. As I read the documentation, SQL Server seems to very much prefer certificates ...
Mike Marshall's user avatar