Database Administrators

Questions tagged [certificate]

Ask Question

A container for a private and public key pair that includes additional meta-data / properties. Certificates are typically used for encryption as well as generating and validating signatures (e.g. module signing, message verification, etc).

48 questions
Newest
Active
Bounties
0
Unanswered
Filter by
Sorted by
Tagged with
0
votes
1answer
22 views

Domain Certificate Authority Generated Certificate and SQL Server - Keyset does not exist

I do not have much experience with certificates or certificate terminology, so I may be incorrect in how I title things. I am trying to use a domain issued certificate as the certificate used in the ...
1
vote
1answer
53 views

Having a backup of the master key, how can I restore a database that was encrypted by master key?

while setting up AlwaysOn - Availability Group on a test system, I generated all the restores from live and restored them to this new server. then I backup all these databases to a network share to ...
5
votes
2answers
72 views

Changing a certifcate+key algorithm by dropping & recreating with the same names

We have a situation where a symmetric key has been created (a long time ago) using TRIPLE_DES. This is used to encrypt a password column, and is used by around ten stored procedures (that utilizes ...
0
votes
0answers
25 views

Do I need client or server cert for mySQL master/master replication?

WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates: using --sign, which creates a client-cert Using --server, which creates a server-cert The ...
0
votes
0answers
27 views

How to convert native date value column in a pivot

OPEN SYMMETRIC KEY TblUserDefinedFieldKey DECRYPTION BY CERTIFICATE mDNACert SELECT * FROM ( SELECT u.public_id, u.instance_id, u.state, u.tag, udf.name AS [user_defined_key], CONVERT(NVARCHAR(...
0
votes
1answer
78 views

How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?

I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
0
votes
1answer
72 views

How do I debug/set up MariaDB SSL connection?

[ I originally posted this on ServerFault but then was pointed at this community ] Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections. I have ...
2
votes
1answer
46 views

Creating encrypted backups inhouse to be restored at client

I am trying to understand the mechanics of database backup encryptions, but there are some issues, which I can't seem to wrap my head around. I have 2 requirements: I need to be able to create and ...
1
vote
1answer
41 views

Is it possible to login to an Oracle schema using a certificate?

The question is based on having to deal with lots of automated processing (testing, mostly). As it stands, all the schemas used have the same well known password, which is stored in lots of ...
1
vote
0answers
66 views

SSL certificate for MS SQL Server

I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell. In the first scenario I can ...
1
vote
1answer
29 views

Using a real certificate with rethinkdb cert chain bundle

I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
0
votes
1answer
60 views

Microsoft Key Storage Provider for Always Encrypted Master Key

Hoping someone can help- I've been experimenting with Always Encrypted columns and have generated a certificate in the "Microsoft Software Key Storage Provider" - How can I remove the "Always-...
2
votes
1answer
3k views

The certificate, asymmetric key, or private key file is not valid or does not exist

I'm trying to perform a restore of a database from a different server onto my localhost server .That database is encrypted (the bak file ) ,so I have to decrypt it ,that's fine I have all the cert ...
2
votes
2answers
1k views

Unable to create a self signed Certificate for SQL Server 2017(14.x.xxxx)

Using SQL Server 2017 Developer Edition The command I'm using is: New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName host.doman.com -KeySpec KeyExchange -FriendlyName ...
0
votes
1answer
33 views

Is it possible to use one certificate with aliases for MongoDB cluster?

I currently configure a MongoDB cluster to use TLS certificate. It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
1
vote
1answer
281 views

SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA

I am enabling TLS/SSL encryption on a remote MongoDB instance (running on Windows Server 2012 R2). On the instance's server, devserver.external, I have created an SSL certificate. The CN on the ...
1
vote
0answers
55 views

Is it possible to CREATE CERTIFICATE using certificate from the Windows Certification Store?

Additional Information With SQL Server 2016 SP1 we have the availability to use Always Encrypted functionality with the Standard Edition of the server. One is able to create a certificate in the ...
-2
votes
1answer
93 views

Signing a User-Defined Function with a certificate in SQL Server

I'm trying to use a certificate to sign a user-defined function in SQL server (2016). My code is as follows: CREATE FUNCTION myfunction() RETURNS TABLE AS RETURN SELECT col1, col2 FROM ...
1
vote
1answer
43 views

will alwaysOn deal with certificates? do I have to do anything?

in a database that is part of an availability group (alwayson), in the current primary server I create a certificate and sign some stored procedures using it. all is working fine so far. use ...
4
votes
1answer
4k views

SQL Server SSL Encryption - SelfSign Cert working - why?

I realize this is strange behaviour and I wonder if it is supposed to be working that way when using SQL Server generated self-signed certificate. Client (Management Studio) with "encrypt connection" ...
5
votes
1answer
121 views

Swapping TDE Cert Slow, any way to improve performance?

Fair warning, I am very new to encryption with DBs. Right now we use the following statement to swap certificates when in the process backing/restoring DBs between servers: ALTER DATABASE ENCRYPTION ...
0
votes
1answer
616 views

SQL Server Certificate

I suddenly start to get the message while performing backup, I know i have taken backup of the certificate and stored it in my password manager which I still have access to. My question is that do we ...
2
votes
1answer
361 views

MySQL 5.7 enforce SSL

I'm using MySQL 5.7 and I want to set up SSL to force the client to use a cert. This cert is a self-signed cert that I generate. I have the cert for both server and client being: - CA - cert - key ...
1
vote
1answer
452 views

Permissions to create certificate

Is there a way to grant a user permissions to create certificate in SQL Server?
1
vote
1answer
658 views

Always Encrypted - certificate cannot be used as a column master key

I want to create a new column master key using certificate created in advanced. I use the following command to create a certificate in the Windows Certificate Store - Local Machine. New-...
0
votes
1answer
1k views

How can I perform a mongoimport to a host that requires an SSL Certificate?

I am trying to load some sample JSON data into a MongoDB database (hosted on IBM Bluemix). The connection requires SSL, and a SSL Certificate has been provided, but I keep getting an error when I ...
0
votes
1answer
971 views

Error: The certificate cannot be dropped because one or more entities are either signed or encrypted using it

SQL Server 2008r2 I'm trying to drop a certificate I've created but i get the following error The certificate cannot be dropped because one or more entities are either signed or encrypted using ...
10
votes
2answers
31k views

The certificate chain was issued by an authority that is not trusted

some time ago I installed SQL server 2016 developer edition on a windows 10 home edition environment (a laptop to be precise) and everything was fine. then someone - an administrator on the box - ...
1
vote
1answer
116 views

A SQL Server database backup/restore issue

A backup/restore issue has taken place on one of our client’s server. We use Microsoft SQL Server 2014 installed on Microsoft Windows Server 2012. Problem results: - Critical data loss, inability to ...
2
votes
2answers
1k views

SQL over TLS using Let's Encrypt on Raspberry pi

I want to be able to connect to a database hosted on a Raspberry Pi (mysql-server) from a C# application. In the real world professionals use a Webservice for this, but I want to use the SQL-connector ...
10
votes
1answer
1k views

Permissions in triggers when using cross database certificates

I use cross database certificates (as explained by Erland Sommarskog) to control access to a certain database in my environment ( SQL Server 2008 R2 ). I have stored procedures in database A that ...
3
votes
1answer
2k views

SQL Server certificate for backups: Does expiration date matter?

If I have a cert in SQL Server, used for backups: Can backups still be created after cert expires? Can restore still happen after cert expires? What is the point of having these certs expire? (other ...
1
vote
1answer
210 views

Configure SQL Server to encrypt data traffic in both directions

How can I ensure that SQL Server data traffic is encrypted over the wire both from server to client and from client to server? I have set Force Encryption to Yes and that alone seems to hide query ...
4
votes
1answer
1k views

Impersonate user or login mapped to certificate

Assume that there is a certificate created in database create certificate certName with subject = 'subj'; GO And a user mapped to this certificate create user userName from certificate ...
2
votes
0answers
189 views

Does TLS 1.2 for SQL Server require SHA2/SHA256 certificates?

After reviewing SQL Server compatibility with New TLS Standards and much Googling, I think we've got the updates and settings needed to disable TLS 1.0 on SQL Server 2008 R2 with .NET 3.5.1. But I'...
5
votes
1answer
2k views

Stored procedure security with execute as, cross database queries, and module signing

I have a situation that, while I was able to work around it (as the repro will show), I don't understand. Here are the high points Two databases, ChainingSource and ChainDestination, both of which ...
5
votes
1answer
92 views

Is there any reason to back up these system-created certificates?

I understand the need for backing up keys and user defined certificates, but is there any reason that we should back up these certificates that are system-created? MS_AgentSigningCertificate ...
1
vote
1answer
926 views

Setup SQL Server SSL client certificate

I have created a certificate authority on my Linux server using OpenSSL. I have added that certificate authority to the Windows Trusted Root Certificate Authorities, which it now recognises. What do ...
0
votes
1answer
363 views

In SQL Server and using only client side encryption requests, can I use a different certificate for each client?

Based upon the UI dialogue box in SQL Server Configuration Manager, if I right click 'Protocols for server_name', it appears that I can only select one certificate to use. My experience so far tells ...
3
votes
0answers
57 views

How can I attach the SSL authenticated certificate for my SQL Server 2014 if it is not on domain controller

We have Microsoft Azure with Windows Server 2012 R2 in Cloud Computer and window Server is Standalone it is not come under domain controller. We want to add SSL authentication. SQL Server is not ...
7
votes
2answers
6k views

Error: “The certificate cannot be dropped because one or more entities are either signed or encrypted using it.”

I have a certificate I would like to remove from the database. If I issue the command DROP CERTIFICATE <FooCert> I get the error The certificate cannot be dropped because one or more ...
1
vote
0answers
167 views

Minimum permission needed for GRANT CRUD ON

I have a certificate set up to do cross database CRUD operations. The certificate is linked to a user in each destination database. I sign any stored procedures in the source database with the ...
4
votes
1answer
2k views

Find signed procedures, functions, triggers, assemblies and by which certificates / asymmetric keys

I have created a few Certificates (via CREATE CERTIFICATE) and Asymmetric Keys (via CREATE ASYMMETRIC KEY) and used them to sign and counter-sign various Stored Procedures, User-Defined Functions (...
2
votes
1answer
691 views

SSDT Schema Comparison for Stored Procedure signed by a Certificate

I am using SSDT 14.0.50730.0 in Visual Studio Professional 2015. I am comparing databases between two instances and it is finding that there are stored procedures that do not match with regard to ...
6
votes
1answer
402 views

Is it possible to add a certificate to a database role?

I have a certificate I am using for inter-DB access to a stored procedure in SQL Server, and am able to provide access to the stored procedure by creating a new user in the database using: CREATE ...
2
votes
2answers
573 views

How to tell if Database Certificate Used?

I plan to migrate a SQL Server database to another server. There is a certificate listed under the Security > Certificates view in SSMS Object Explorer. I ran the below query to check if database is ...
6
votes
3answers
6k views

Sharing certificates encryped by password between DBs and instances

Question: I am trying to create a single (self signed) certificate and deploy across many databases and instances. I create and backup the cert with: USE MASTER CREATE CERTIFICATE DavesCert ...
3
votes
2answers
2k views

SYMMETRIC key & certificates role in sql server?

1) CREATE SYMMETRIC KEY SecureSymmetricKey WITH ALGORITHM = DESX ENCRYPTION BY PASSWORD = N'StrongPassword'; I'm trying to figure out about the SQL Server encryption. once I've executed the ...