Solved

MS Access and SQL Server SSL Encryption

Posted on 2014-10-09
7
789 Views
Last Modified: 2014-10-15
How can I implement 256 bit secure SSL connection from MS Access to a remote SQL Server.  The remote server does not enforce all connections to be secure.
0
Comment
Question by:Bill Ross
  • 4
  • 3
7 Comments
 
LVL 57
ID: 40372625
Bill,

 You'll need encrypt=true in the connection string and be using the Native SQL client on the machine.

Does the server already have a certificate (sounds like that is all setup)?  If not, you'll want to run through this:

http://support.microsoft.com/kb/316898

Also, depending on the version of SQL and the certificate subject, you may have to setup an alias for the server to use in the connection string for server=

Certificates often use fully qualified domain names for a server, where as in a connection string, you generally use a short name.

Jim.
0
 
LVL 14

Author Comment

by:Bill Ross
ID: 40372712
Hi Jim,

The server is not configured for SSL and the MS Access client is one of many various users.  Is it possible to configure just the Access  client side so that the connection from the local client to the server is SSL?  I'm not sure I can change the server as there are many clients and many databases.

Thanks!

Bill
0
 
LVL 57
ID: 40372743
Bill,

<<Is it possible to configure just the Access  client side so that the connection from the local client to the server is SSL?  >>

  No.  There are a number of steps that need to be done on the server to set it up.   SSL requires a certificate to be installed on the server, that cert tied to SQL, and also installed client side.

Jim.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 14

Author Comment

by:Bill Ross
ID: 40372779
Hi Jim,

OK.  If I can get the server configured do all clients and all databases need to use SSL or can just the Access client use SSL?  Does 128 or 256 bit security make any difference?

Thanks,

Bill
0
 
LVL 57

Accepted Solution

by:
Jim Dettman (Microsoft MVP/ EE MVE) earned 500 total points
ID: 40372791
<<f I can get the server configured do all clients and all databases need to use SSL or can just the Access client use SSL?  >>

 You can configure it either way.   On SQL Server, you set it that either all connections are forced or not.   If not, and a client requests a SSL connection, it will still take it.   It would apply to all databases as it's the actual connection between server and client.

<<Does 128 or 256 bit security make any difference?>>

  longer bits are harder to crack, but unless I'm mistaken, SQL only supports 128 at this point (In fact I think as a whole, SSL is still 128 for most things).

  2012 might support 256, I'd have to check as I haven't used it for anything yet.

Jim.
0
 
LVL 14

Author Comment

by:Bill Ross
ID: 40383183
Hi Jim,

Actually, SQL 2008 R2 and later support 256-bit SSL.  Thank you for the help!

Bill
0
 
LVL 14

Author Closing Comment

by:Bill Ross
ID: 40383184
Thanks!  You got me on the right track.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction When developing Access applications, often we need to know whether an object exists.  This article presents a quick and reliable routine to determine if an object exists without that object being opened. If you wanted to inspect/ite…
I see at least one EE question a week that pertains to using temporary tables in MS Access.  But surprisingly, I was unable to find a single article devoted solely to this topic. I don’t intend to describe all of the uses of temporary tables in t…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Basics of query design. Shows you how to construct a simple query by adding tables, perform joins, defining output columns, perform sorting, and apply criteria.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now