| title | description | author | ms.author | ms.date | ms.service | ms.subservice | ms.topic | ms.collection | monikerRange | |
|---|---|---|---|---|---|---|---|---|---|---|
SQL Server Native Client Configuration Properties (Flags Tab) |
Find out about the options on the Flags tab of the SQL Server Native Client Configuration Properties dialog box. |
rwestMSFT |
randolphwest |
01/09/2024 |
sql |
tools-other |
conceptual |
|
>=sql-server-2016 |
[!INCLUDE SQL Server Windows Only]
[!INCLUDE msCoName] [!INCLUDE ssNoVersion] clients on this machine, communicate with [!INCLUDE ssNoVersion] servers using the protocols provided in the [!INCLUDE ssNoVersion] Native Client library file. This page configures the client computer to request an encrypted connection using Transport Layer Security (TLS), previously known as Secure Sockets Layer (SSL). If an encrypted connection cannot be established, the connection fails.
The sign-in process is always encrypted. The options in this article apply only to encrypting data. For more information about how [!INCLUDE ssNoVersion] encrypts communication and for instructions on how to configure the client to trust the root authority of the server certificate, see "Encrypting Connections to [!INCLUDE ssNoVersion]" and "How to: Enable Encrypted Connections to the [!INCLUDE ssDE] ( [!INCLUDE ssNoVersion] Configuration Manager)" in [!INCLUDE ssNoVersion] Books Online.
Important
[!INCLUDE snac-removed-oledb-and-odbc]
Force protocol encryption
Request a connection using TLS.
Trust Server Certificate
When set to No, the client process attempts to validate the server certificate. The client and server must each have a certificate issued from a public certification authority. If the certificate is not present on the client computer, or if the validation of the certificate fails, the connection is terminated.
When set to Yes, the client does not validate the server certificate, enabling the use of a self-signed certificate.
Trust Server Certificate is only available if Force protocol encryption is set to Yes.