Questions tagged [certificate]
A container for a private and public key pair that includes additional meta-data / properties. Certificates are typically used for encryption as well as generating and validating signatures (e.g. module signing, message verification, etc).
65
questions
1
vote
1answer
28 views
How to get certificate expiration date for certificate in mirroring endpoint in SQL Server 2016 Always On Availability Group?
I created a domain-independent 2-node SQL Server 2016 Always On Availability Group using the Microsoft instructions:
https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/...
1
vote
1answer
24 views
ola-hallengren backup solution with encryption is not encrypting
Installed OH's scripts and they run great. sqlserver 2017 standard edition in a testing/dev environment. testing before rolling out to production.
I did a test of a restoration of an encrypted, or so ...
0
votes
1answer
15 views
Recreate a Certifcate Encrypted by Password to another database
I have created a stored procedure which requires permissions across a number of databases:
USE MyDB;
CREATE PROCEDURE dbo.MyProc
(
@ScheduleName NVARCHAR(260),
@KeepSchedule BIT = 0
)
AS
...
0
votes
2answers
21 views
need help understanding the error-message: Error Connecting to database FATAL : no pg_hba.conf entry
We're trying to connect to a postgres/postgis installation on a remote server, using QGIS-Application. When accessing from another pc or from the same pc via pgadmin4v4 with the same credential/...
0
votes
1answer
93 views
SQL Server - Add signature to stored procedure by certificate does not work
I have a stored procedure in Database 1 that updates couple of tables in Database 1 and Database 2
To avoid granting calling login/user permissions to do table updates, I try to use code signing
...
0
votes
1answer
171 views
SQL Server MCSA Database Administration Certification retires on June 30, 2020 - is there going to be a replacement? [closed]
Looking at exams 70-764 and 70-765
This exam retires on June 30, 2020. A replacement exam may be available. To learn more, visit our blog: https://www.microsoft.com/en-us/learning/community.aspx ...
1
vote
1answer
77 views
SQL Server Encrypted Connections - Configuration Manager does not see Certificate
My goal is to implement encrypted connections on Test SQL Server instance
First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
0
votes
0answers
52 views
Setup certification for SQL Server running on Debian
I have successfully setup an instance of a SQL Server 2017 instance on the latest Debian release, and a domain that points to that server, and I have gotten the respective certificates by using ...
0
votes
0answers
24 views
SQL Server - How to know to which database user certificate is mapped to?
Inside a user database, I have two certificates, both are used for signing stored procedures
First cert was created long time ago by someone
Second I created myself for testing purposes
For ...
1
vote
2answers
247 views
SSMS login by external developers
This is my first question so please bear with me !
We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016.
They have AD logins, and these are ...
0
votes
0answers
915 views
How to generate a self-signed SSL certificate for MS SQL server 2008 R2 using OpenSSL?
Using OpenSSL, I'd like to generate a self-signed certificate for usage with Microsoft SQL server 2008 R2. This might be unusual, but I'd like to learn what's going on behind the scenes.
I have ...
0
votes
1answer
109 views
Grant User permission to view XE results via sys.fn_xe_file_target_read_file
I need to grant a user (MyDomain\JohnSmith) permission to view one particular XE session results using sys.fn_xe_file_target_read_file
I thought the best way to do this would be to encapsulate the ...
5
votes
1answer
159 views
Permissions issue in Docker SQL Server 2017 while restoring certificate
Docker SQL Server 2017 container @latest. Using master database.
The error I am facing is the following:
[S00019][15208] The certificate, asymmetric key, or private key file is not valid or does not ...
2
votes
1answer
203 views
SQL Server Encryption with “localhost” certificate
Using SQL Server 2014/2016:
I'm trying to encrypt my connections from my application to my local SQL Server instance. As I read the documentation, SQL Server seems to very much prefer certificates ...
0
votes
1answer
55 views
Force Client to Validate SSL Certificate?
When SQL Server uses the Force Encryption with value "yes" then if in the client-side we use encrypt=true option in the connection string, then the client application tries to verify the server ...
1
vote
2answers
259 views
SQL TDE and Certificate Handling Recommendations
I've seen the information on this post: But I don't think it answers this particular question/concern:
I have multiple SQL servers with multiple databases. We want to use TDE on a few of them.
...
2
votes
1answer
71 views
Is SQL Server Certificate using asymmetric encryption internally?
In Books Online I've read that both asymmetric key and certificates use the idea of asymmetric encryption. For the asymmetric key it's clear, but do the certificates created in SQL Server or let's say ...
0
votes
1answer
67 views
Domain Certificate Authority Generated Certificate and SQL Server - Keyset does not exist
I do not have much experience with certificates or certificate terminology, so I may be incorrect in how I title things.
I am trying to use a domain issued certificate as the certificate used in the ...
1
vote
1answer
206 views
Having a backup of the master key, how can I restore a database that was encrypted by master key?
while setting up AlwaysOn - Availability Group on a test system,
I generated all the restores from live and restored them to this new server.
then I backup all these databases to a network share to ...
5
votes
2answers
183 views
Changing a certifcate+key algorithm by dropping & recreating with the same names
We have a situation where a symmetric key has been created (a long time ago) using TRIPLE_DES. This is used to encrypt a password column, and is used by around ten stored procedures (that utilizes ...
0
votes
0answers
42 views
Do I need client or server cert for mySQL master/master replication?
WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates:
using --sign, which creates a client-cert
Using --server, which creates a server-cert
The ...
0
votes
0answers
33 views
How to convert native date value column in a pivot
OPEN SYMMETRIC KEY TblUserDefinedFieldKey DECRYPTION BY CERTIFICATE mDNACert
SELECT * FROM
(
SELECT u.public_id, u.instance_id, u.state, u.tag, udf.name AS [user_defined_key],
CONVERT(NVARCHAR(...
0
votes
1answer
758 views
How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?
I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
0
votes
1answer
436 views
How do I debug/set up MariaDB SSL connection?
[ I originally posted this on ServerFault but then was pointed at this community ]
Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections.
I have ...
2
votes
1answer
73 views
Creating encrypted backups inhouse to be restored at client
I am trying to understand the mechanics of database backup encryptions, but there are some issues, which I can't seem to wrap my head around. I have 2 requirements:
I need to be able to create and ...
1
vote
1answer
45 views
Is it possible to login to an Oracle schema using a certificate?
The question is based on having to deal with lots of automated processing (testing, mostly). As it stands, all the schemas used have the same well known password, which is stored in lots of ...
1
vote
0answers
251 views
SSL certificate for MS SQL Server
I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell.
In the first scenario I can ...
1
vote
1answer
58 views
Using a real certificate with rethinkdb cert chain bundle
I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
0
votes
1answer
87 views
Microsoft Key Storage Provider for Always Encrypted Master Key
Hoping someone can help-
I've been experimenting with Always Encrypted columns and have generated a certificate in the "Microsoft Software Key Storage Provider" -
How can I remove the "Always-...
3
votes
1answer
7k views
The certificate, asymmetric key, or private key file is not valid or does not exist
I'm trying to perform a restore of a database from a different server onto my localhost server .That database is encrypted (the bak file ) ,so I have to decrypt it ,that's fine I have all the cert ...
1
vote
2answers
2k views
Unable to create a self signed Certificate for SQL Server 2017(14.x.xxxx)
Using SQL Server 2017 Developer Edition
The command I'm using is:
New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName host.doman.com -KeySpec KeyExchange -FriendlyName ...
0
votes
1answer
34 views
Is it possible to use one certificate with aliases for MongoDB cluster?
I currently configure a MongoDB cluster to use TLS certificate.
It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
0
votes
1answer
420 views
SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA
I am enabling TLS/SSL encryption on a remote MongoDB instance (running on Windows Server 2012 R2). On the instance's server, devserver.external, I have created an SSL certificate. The CN on the ...
1
vote
0answers
71 views
Is it possible to CREATE CERTIFICATE using certificate from the Windows Certification Store?
Additional Information
With SQL Server 2016 SP1 we have the availability to use Always Encrypted functionality with the Standard Edition of the server. One is able to create a certificate in the ...
-2
votes
1answer
201 views
Signing a User-Defined Function with a certificate in SQL Server
I'm trying to use a certificate to sign a user-defined function in SQL server (2016). My code is as follows:
CREATE FUNCTION myfunction()
RETURNS TABLE
AS
RETURN
SELECT col1, col2 FROM ...
1
vote
1answer
44 views
will alwaysOn deal with certificates? do I have to do anything?
in a database that is part of an availability group (alwayson), in the current primary server I create a certificate and sign some stored procedures using it.
all is working fine so far.
use ...
4
votes
1answer
7k views
SQL Server SSL Encryption - SelfSign Cert working - why?
I realize this is strange behaviour and I wonder if it is supposed to be working that way when using SQL Server generated self-signed certificate.
Client (Management Studio) with "encrypt connection" ...
5
votes
1answer
156 views
Swapping TDE Cert Slow, any way to improve performance?
Fair warning, I am very new to encryption with DBs. Right now we use the following statement to swap certificates when in the process backing/restoring DBs between servers:
ALTER DATABASE ENCRYPTION ...
0
votes
1answer
1k views
SQL Server Certificate
I suddenly start to get the message while performing backup, I know i have taken backup of the certificate and stored it in my password manager which I still have access to.
My question is that do we ...
3
votes
1answer
592 views
MySQL 5.7 enforce SSL
I'm using MySQL 5.7 and I want to set up SSL to force the client to use a cert.
This cert is a self-signed cert that I generate.
I have the cert for both server and client being:
- CA
- cert
- key
...
1
vote
1answer
681 views
Permissions to create certificate
Is there a way to grant a user permissions to create certificate in SQL Server?
1
vote
1answer
759 views
Always Encrypted - certificate cannot be used as a column master key
I want to create a new column master key using certificate created in advanced. I use the following command to create a certificate in the Windows Certificate Store - Local Machine.
New-...
0
votes
1answer
2k views
How can I perform a mongoimport to a host that requires an SSL Certificate?
I am trying to load some sample JSON data into a MongoDB database (hosted on IBM Bluemix).
The connection requires SSL, and a SSL Certificate has been provided, but I keep getting an error when I ...
0
votes
1answer
1k views
Error: The certificate cannot be dropped because one or more entities are either signed or encrypted using it
SQL Server 2008r2
I'm trying to drop a certificate I've created but i get the following error
The certificate cannot be dropped because one or more entities are
either signed or encrypted using ...
17
votes
2answers
57k views
The certificate chain was issued by an authority that is not trusted
some time ago I installed SQL server 2016 developer edition on a windows 10 home edition environment (a laptop to be precise) and everything was fine.
then someone - an administrator on the box - ...
1
vote
1answer
128 views
A SQL Server database backup/restore issue
A backup/restore issue has taken place on one of our client’s server.
We use Microsoft SQL Server 2014 installed on Microsoft Windows Server 2012.
Problem results: - Critical data loss, inability to ...
2
votes
2answers
1k views
SQL over TLS using Let's Encrypt on Raspberry pi
I want to be able to connect to a database hosted on a Raspberry Pi (mysql-server) from a C# application. In the real world professionals use a Webservice for this, but I want to use the SQL-connector ...
11
votes
1answer
2k views
Permissions in triggers when using cross database certificates
I use cross database certificates (as explained by Erland Sommarskog) to control access to a certain database in my environment ( SQL Server 2008 R2 ).
I have stored procedures in database A that ...
3
votes
1answer
3k views
SQL Server certificate for backups: Does expiration date matter?
If I have a cert in SQL Server, used for backups:
Can backups still be created after cert expires?
Can restore still happen after cert expires?
What is the point of having these certs expire? (other ...
asked Dec 1 '16 at 16:05
Jonesome Reinstate Monica
2,8986 gold badges28 silver badges50 bronze badges
1
vote
1answer
339 views
Configure SQL Server to encrypt data traffic in both directions
How can I ensure that SQL Server data traffic is encrypted over the wire both from server to client and from client to server?
I have set Force Encryption to Yes and that alone seems to hide query ...
