How to enable TLS between Metadefender Vault and SQL Server for enhanced security?

To enable TLS between your product and SQL Server, you need to follow these steps:

1. Configure SQL Server to Support TLS:

  • Enable TLS Protocol: Ensure that SQL Server is configured to support TLS. This involves enabling the "Force Encryption" option within SQL Server Configuration Manager.
  • Certificate Installation: You'll need to obtain an SSL/TLS certificate and install it on the SQL Server. This certificate can be obtained from a trusted Certificate Authority (CA) or generated internally using tools like OpenSSL.
  • Binding Certificate: Once the certificate is installed, bind it to the SQL Server instance in SQL Server Configuration Manager. Specify the certificate in the "Certificate" tab under the "Protocols for SQL Server" properties.

2. Enable encrytion on Metadefender Vault side:

  • Locate the 'SftDatabaseConfigurationTool.exe' in the '<Metadefender Vault installation folder>/tools' directory.
  • Execute the SftDatabaseConfigurationTool.exe with the '--encrypt' parameter to utilize the encryption feature.
  • If all conditions are met, the tool will initiate encryption for your connection with the SQL Server from the Metadefender Vault side.

The encryption option does not support self-signed certificates, and it's important to note that the tool will not function with Microsoft SQL Server Express LocalDB.

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard