Hi
We are trying to make an encrypted connection (for traffic that goes between two domains).
1) on a SQL server on domain 1 (where the data lives), we have configured a SQL instance to use a certificate (using SQL config manager etc)/ Force encryption is still set to False (as we dont want all connections to be encrypted)
2) on domain 2, in data tools, I have created a package - with an OLEDB datasource, that uses a connection manager.
This connection manager has two properties:
Use Encryption for Data and Trust Server Certificate.
If I try Use Encryption for Data = TRUE, and Trust Server Certificate = True
- then the connection works (as the client (data tools) is being forced to "blindly" trust the domain 1 server cert. This is as expected.
However, If I try Use Encryption for Data = TRUE, and Trust Server Certificate = False - then the connection fails - I get an error message saying
“Test connection failed because of an error in initializing provider. Client unable to establish connection SSL provider: The certificate chain was issued by an authority that is not trusted”
But we want to use this combination - and I am told that the relevant intermidate certifcates (from our PKI infrastrucutre) have been installed on both the server and client machine (and ditto for the server where the SSIS package will be run from.
Can anyone see anything wrong ?
Is there any way to show where the certificate chain is breaking down ?
Thanks
G
If its relevant, in SQL config manager, network config, protocols for MSSQLSERVER, only Shared Memory and TCP/IP are enabled.