Can we enable tls 1.0 on MSSQL Server 2019 on database level? if yes then how?

Rafay Pervaiz 21 Reputation points
2020-09-25T19:32:25.8+00:00

Hi , i am running sql server 2019 on Linux box and trying to connect using a Windows server 2016 client, how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level.

TIA.

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,689 questions
Transact-SQL
Transact-SQL
A Microsoft extension to the ANSI SQL language that includes procedural programming, local variables, and various support functions.
4,625 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Olaf Helper 44,311 Reputation points
    2020-09-26T05:44:29.527+00:00

    how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level

    TLS 1.0 is old & deprecated, better utilize 1.2 or 1,3.
    And TLS is encryption on network level, you can not enable it on database level or only for SQL Server.

    See TLS 1.2 support for Microsoft SQL Server

    0 comments
  2. CathyJi-MSFT 21,871 Reputation points Microsoft Vendor
    2020-09-28T06:56:54.463+00:00

    Hi @Rafay Pervaiz ,

    >how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level.

    As Olaf mentioned, TLS is encryption on network level. Not on the Database/instance level . And we suggest you enable TLS 1.2. Use the following registry keys and their values to enable and disable TLS 1.2.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "Enabled"=dword:00000001
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "DisabledByDefault"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "Enabled"=dword:00000001
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "DisabledByDefault"=dword:00000000

    Please refer to Enable and Disable TLS 1.2.

    Best regards,
    Cathy

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.