Configure SSL certificates MS SQL server on Windows Server

mssql_ssl_conf.md

Enable SSL connection MSSQL

• Search Windows Feature in Start
• Enable IIS - Followed https://stackoverflow.com/questions/30901434/iis-manager-in-windows-10
• Open IIS and create self signed certificate
• Open Sql Server Configuration Manager 2016 (apparently this shows the 64bit mssql instance)
• Click on MSSQL instance > Properties > Force Encryption to yes > Go to certificate tab > select certificate that was created in IIS
• Give full permission to paths mentioned here - https://stackoverflow.com/questions/36817627/ssl-certificate-missing-from-dropdown-in-sql-server-configuration-manager
• Restart MSSQL instance in SQL Server Configuration Manager
• Run mmc
• Open snapin > add certificate to console
• Right click certificate > manage private keys > add permission > MSSQLSERVER

Export ssl cert

• Go to IIS > export ssl cert
• Execute openssl command to convert ssl cert to .crt X509 format

openssl pkcs12 -in C:\Users\Administrator\Desktop\mssql-master.pfx -out mssql.crt -no
des

Enter Import Password:mssql-master

Double check by dumping the cert

• Using https://gist.github.com/lnattrass/a4a91dbf439fc1719d69f7865c1b1791