Questions tagged [certificate]
A container for a private and public key pair that includes additional meta-data / properties. Certificates are typically used for encryption as well as generating and validating signatures (e.g. module signing, message verification, etc).
81
questions
2
votes
1answer
71 views
Load assembly from a certificate in SQL Server
We received an assembly from external vendor as
CREATE ASSEMBLY MYCALC_DLL
AUTHORIZATION dbo
FROM 0x42A728....<300,000 binary values>
WITH PERMISSION_SET = UNSAFE
GO
And this DLL is been ...
0
votes
1answer
32 views
Supported RSA Key Lengths for Encrypted SQL Connections
I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
0
votes
0answers
38 views
MSSQL 2012 Update (or create new certificate with same name) that uses Symmetric Key encryption
Super short version of my question:
For a MSSQL 2012 DB is it possible to update the current certificate with a new expiry date and new PW (or create new certificate with same name)? Or some other ...
1
vote
1answer
45 views
Azure Data studio - connection to server in the same network - Error: The received certificate has expired
I am trying to connect to SQL server on my network with Azure Data Studio, and I am getting error:
A connection was successfully established with the server, but then an error occurred during the ...
0
votes
1answer
24 views
SQL Mirroring Replace Certificates
I have inherited two SQL 2016 servers with two mirrored databases.
They have been built with certificates as they are in a workgroup, the certs expire in six months. I am trying to understand the ...
0
votes
0answers
16 views
Using Master Key & Certificate on Always On Replica
Im running on a SQL 2017 Always On 14.0.3381.3 DB.
Im trying to use EncryptByKey and DecryptByKey feature to encrypt sensitive info in one column in one table.
I've created the MasterKey, Certificate ...
3
votes
1answer
127 views
Changing Database Encryption Keys
I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
4
votes
1answer
398 views
Database master key and certificate for backup encryption - SQL Server
I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows:
USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!';
GO
...
0
votes
0answers
60 views
Azure Elastic Job step to a privatelink sqldatabase target fails with "target principal name is incorrect" (Trust Server Certificate works in SSMS)
My first Elastic Job Agent jobstep to a privatelink sqldatabase target fails with "target principal name is incorrect." I can connect to servername.privatelink.database.windows.net and the ...
0
votes
1answer
54 views
How to query which users are using which certificates in SQL Server?
I would like to know which users a certificate is used by. I tried to do this query but got no results:
SELECT
master.sys.sql_logins.name,
sys.certificates.name
FROM
master.sys....
0
votes
1answer
86 views
Install PFX certificate on SQL 2008 R2
We have a MS SQL 2008 R2 service running on a Windows 7 computer. I've developed a webapplication that runs on a Digital Ocean droplet. This droplet makes a connection with this computer through a ...
0
votes
0answers
51 views
MySQL SSL Gives Warnings about big name Certificate Authorities
I have been able to setup my MySQL to use LetsEncrypt certificates with the steps below, unfortunately it is issuing warnings about official certs being self-signed (like from DigiCert, Comodo, etc...)...
1
vote
1answer
964 views
How to configure TCPS in JDBC thin client for oracle
An Java Application running with JDBC thin wtih TCP connection, Now require is to convert in TCPS for encryption transmission from application to database.
String url = "jdbc:oracle:thin:@(...
2
votes
1answer
532 views
What Microsoft DBA certificate should I acquire?
I am thinking about getting Microsoft DBA certification, but trying to find out which exactly certificate should I study for gets a little confusing.
My company uses on premises SQL Server 2017 but ...
1
vote
2answers
299 views
Why would I download CA certificate when starting a managed Postgres cluster on DigitalOcean?
I am trying for the first time a Postgres cluster provided as a managed service by DigitalOcean.com.
As part of configuring the new cluster, their web interface gives me a user name, password, port ...
0
votes
1answer
326 views
psql command, how to enforce certificate check?
I have created a cockroachdb v20.1.0 cluster based on this: https://www.cockroachlabs.com/docs/stable/deploy-cockroachdb-on-premises.html
I have also created a test user like this:
CREATE USER test ...
2
votes
1answer
266 views
How to get certificate expiration date for certificate in mirroring endpoint in SQL Server 2016 Always On Availability Group?
I created a domain-independent 2-node SQL Server 2016 Always On Availability Group using the Microsoft instructions:
https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/...
2
votes
1answer
121 views
ola-hallengren backup solution with encryption is not encrypting
Installed OH's scripts and they run great. sqlserver 2017 standard edition in a testing/dev environment. testing before rolling out to production.
I did a test of a restoration of an encrypted, or so ...
0
votes
1answer
35 views
Recreate a Certifcate Encrypted by Password to another database
I have created a stored procedure which requires permissions across a number of databases:
USE MyDB;
CREATE PROCEDURE dbo.MyProc
(
@ScheduleName NVARCHAR(260),
@KeepSchedule BIT = 0
)
AS
...
0
votes
2answers
382 views
need help understanding the error-message: Error Connecting to database FATAL : no pg_hba.conf entry
We're trying to connect to a postgres/postgis installation on a remote server, using QGIS-Application. When accessing from another pc or from the same pc via pgadmin4v4 with the same credential/...
0
votes
1answer
390 views
SQL Server - Add signature to stored procedure by certificate does not work
I have a stored procedure in Database 1 that updates couple of tables in Database 1 and Database 2
To avoid granting calling login/user permissions to do table updates, I try to use code signing
...
0
votes
1answer
551 views
SQL Server MCSA Database Administration Certification retires on June 30, 2020 - is there going to be a replacement? [closed]
Looking at exams 70-764 and 70-765
This exam retires on June 30, 2020. A replacement exam may be available. To learn more, visit our blog: https://www.microsoft.com/en-us/learning/community.aspx ...
1
vote
1answer
457 views
SQL Server Encrypted Connections - Configuration Manager does not see Certificate
My goal is to implement encrypted connections on Test SQL Server instance
First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
0
votes
0answers
361 views
Setup certification for SQL Server running on Debian
I have successfully setup an instance of a SQL Server 2017 instance on the latest Debian release, and a domain that points to that server, and I have gotten the respective certificates by using ...
0
votes
0answers
68 views
SQL Server - How to know to which database user certificate is mapped to?
Inside a user database, I have two certificates, both are used for signing stored procedures
First cert was created long time ago by someone
Second I created myself for testing purposes
For ...
1
vote
2answers
905 views
SSMS login by external developers
This is my first question so please bear with me !
We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016.
They have AD logins, and these are ...
0
votes
1answer
3k views
How to generate a self-signed SSL certificate for MS SQL server 2008 R2 using OpenSSL?
Using OpenSSL, I'd like to generate a self-signed certificate for usage with Microsoft SQL server 2008 R2. This might be unusual, but I'd like to learn what's going on behind the scenes.
I have ...
0
votes
1answer
176 views
Grant User permission to view XE results via sys.fn_xe_file_target_read_file
I need to grant a user (MyDomain\JohnSmith) permission to view one particular XE session results using sys.fn_xe_file_target_read_file
I thought the best way to do this would be to encapsulate the ...
5
votes
1answer
232 views
Permissions issue in Docker SQL Server 2017 while restoring certificate
Docker SQL Server 2017 container @latest. Using master database.
The error I am facing is the following:
[S00019][15208] The certificate, asymmetric key, or private key file is not valid or does not ...
2
votes
1answer
488 views
SQL Server Encryption with "localhost" certificate
Using SQL Server 2014/2016:
I'm trying to encrypt my connections from my application to my local SQL Server instance. As I read the documentation, SQL Server seems to very much prefer certificates ...
0
votes
1answer
87 views
Force Client to Validate SSL Certificate?
When SQL Server uses the Force Encryption with value "yes" then if in the client-side we use encrypt=true option in the connection string, then the client application tries to verify the server ...
3
votes
2answers
787 views
SQL TDE and Certificate Handling Recommendations
I've seen the information on this post: But I don't think it answers this particular question/concern:
I have multiple SQL servers with multiple databases. We want to use TDE on a few of them.
...
2
votes
1answer
96 views
Is SQL Server Certificate using asymmetric encryption internally?
In Books Online I've read that both asymmetric key and certificates use the idea of asymmetric encryption. For the asymmetric key it's clear, but do the certificates created in SQL Server or let's say ...
0
votes
1answer
137 views
Domain Certificate Authority Generated Certificate and SQL Server - Keyset does not exist
I do not have much experience with certificates or certificate terminology, so I may be incorrect in how I title things.
I am trying to use a domain issued certificate as the certificate used in the ...
1
vote
1answer
535 views
Having a backup of the master key, how can I restore a database that was encrypted by master key?
while setting up AlwaysOn - Availability Group on a test system,
I generated all the restores from live and restored them to this new server.
then I backup all these databases to a network share to ...
5
votes
2answers
470 views
Changing a certifcate+key algorithm by dropping & recreating with the same names
We have a situation where a symmetric key has been created (a long time ago) using TRIPLE_DES. This is used to encrypt a password column, and is used by around ten stored procedures (that utilizes ...
0
votes
0answers
60 views
Do I need client or server cert for mySQL master/master replication?
WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates:
using --sign, which creates a client-cert
Using --server, which creates a server-cert
The ...
0
votes
0answers
33 views
How to convert native date value column in a pivot
OPEN SYMMETRIC KEY TblUserDefinedFieldKey DECRYPTION BY CERTIFICATE mDNACert
SELECT * FROM
(
SELECT u.public_id, u.instance_id, u.state, u.tag, udf.name AS [user_defined_key],
CONVERT(NVARCHAR(...
0
votes
2answers
1k views
How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?
I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
0
votes
1answer
1k views
How do I debug/set up MariaDB SSL connection?
[ I originally posted this on ServerFault but then was pointed at this community ]
Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections.
I have ...
2
votes
1answer
86 views
Creating encrypted backups inhouse to be restored at client
I am trying to understand the mechanics of database backup encryptions, but there are some issues, which I can't seem to wrap my head around. I have 2 requirements:
I need to be able to create and ...
1
vote
1answer
50 views
Is it possible to login to an Oracle schema using a certificate?
The question is based on having to deal with lots of automated processing (testing, mostly). As it stands, all the schemas used have the same well known password, which is stored in lots of ...
1
vote
0answers
323 views
SSL certificate for MS SQL Server
I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell.
In the first scenario I can ...
1
vote
1answer
95 views
Using a real certificate with rethinkdb cert chain bundle
I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
0
votes
1answer
143 views
Microsoft Key Storage Provider for Always Encrypted Master Key
Hoping someone can help-
I've been experimenting with Always Encrypted columns and have generated a certificate in the "Microsoft Software Key Storage Provider" -
How can I remove the "...
5
votes
1answer
12k views
The certificate, asymmetric key, or private key file is not valid or does not exist
I'm trying to perform a restore of a database from a different server onto my localhost server .That database is encrypted (the bak file ) ,so I have to decrypt it ,that's fine I have all the cert ...
1
vote
2answers
3k views
Unable to create a self signed Certificate for SQL Server 2017(14.x.xxxx)
Using SQL Server 2017 Developer Edition
The command I'm using is:
New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName host.doman.com -KeySpec KeyExchange -FriendlyName ...
0
votes
1answer
36 views
Is it possible to use one certificate with aliases for MongoDB cluster?
I currently configure a MongoDB cluster to use TLS certificate.
It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
0
votes
1answer
558 views
SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA
I am enabling TLS/SSL encryption on a remote MongoDB instance (running on Windows Server 2012 R2). On the instance's server, devserver.external, I have created an SSL certificate. The CN on the ...
1
vote
0answers
94 views
Is it possible to CREATE CERTIFICATE using certificate from the Windows Certification Store?
Additional Information
With SQL Server 2016 SP1 we have the availability to use Always Encrypted functionality with the Standard Edition of the server. One is able to create a certificate in the ...
