Re: ADO.NET security in Windows App?

From: Rob R. Ainscough (robains_at_pacbell.net)
Date: 06/28/05

  • Next message: Dominick Baier [DevelopMentor]: "Re: ADO.NET security in Windows App?" 
    Date: Tue, 28 Jun 2005 12:42:54 -0700

    Found the article on how to enable SSL on SQL Server -- not clear on the
    certificate? Does the certificate need to be different than what is used on
    the web server (IIS)? In my case the SQL Server and Web Server are located
    on the same server box. So I would need to purchase 2 certificates?

    "Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>
    wrote in message news:526574632555904470267683@news.microsoft.com...
    > Hello Rob,
    >
    > that's a SQL server configuration. Consult SQL Server Books Online (BOL).
    > You have to install a certificate for sql server in the cert store of the
    > service account.
    >
    > If you can't find any useful information on how to do this - get back to
    > me.
    >
    > ---------------------------------------
    > Dominick Baier - DevelopMentor
    > http://www.leastprivilege.com
    >
    >> So do I specify in my connection string "Integrated Security=SSL" ?
    >>
    >> As usual, my MSDN search provides a bunch of information not relevant
    >> to my search criteria -- MSDN is becoming more more useless -- I get
    >> better search hit using Google -- frustrating.
    >>
    >> "Dominick Baier [DevelopMentor]"
    >> <dbaier@pleasepleasenospamdevelop.com> wrote in message
    >> news:523796632555552049163721@news.microsoft.com...
    >>
    >>> Hello Rob,
    >>>
    >>> SQL communication is clear text. This includes the initial password
    >>> in the connection string as well as all data you send between
    >>> client/server.
    >>>
    >>> You have two options if you want to secure the data
    >>>
    >>> - IPSec tunnel between the two parties
    >>> - Enable SSL in SQL Server
    >>> ---------------------------------------
    >>> Dominick Baier - DevelopMentor
    >>> http://www.leastprivilege.com
    >>>> I've coded a VB.NET windows service that uses ADO.NET to communicate
    >>>> with both a MS Access database and an MS SQL Server 2000 database.
    >>>> I'm using SQL Authentication to validate access, but I'm not sure
    >>>> what
    >>>> options I have (if any) to secure the data transmission/communicate
    >>>> between my Windows Service and the SQL Server.
    >>>> I know with my web apps I can uses SSL, but what about standard .NET
    >>>> Windows apps -- do I have anyway to secure the data transmission
    >>>> to/from the SQL Server?
    >>>>
    >>>> Thanks,
    >>>>
    >
    >
    >

  • Next message: Dominick Baier [DevelopMentor]: "Re: ADO.NET security in Windows App?"

    Relevant Pages

    • HOWTO: SQL Server SSL On A Cluster
      ... This post describes issues concerning the implementation of SSL ... certificates on SQL Server 2000 clusters. ... cluster and failover is working, ... DC is running a certificate authority, and that the CA is configured ...
      (microsoft.public.sqlserver.clustering)
    • HOWTO: SQL Server SSL On A Cluster
      ... This post describes issues concerning the implementation of SSL ... certificates on SQL Server 2000 clusters. ... cluster and failover is working, ... DC is running a certificate authority, and that the CA is configured ...
      (microsoft.public.sqlserver)
    • Re: SQL Server 2005 SP2 fails in upgrading Database service
      ... Clearing the certificate had no success. ... I suspect there's a problem with the permissions of the SQL Server service ... SQL Server Database Services 2005 ENU SP2 ... This is an informational message only; no user action is ...
      (microsoft.public.sqlserver.setup)
    • Re: SQL Server 2005 SP2 fails in upgrading Database service
      ... Clearing the certificate had no success. ... I suspect there's a problem with the permissions of the SQL Server service ... This is an informational message only; no user action is ...
      (microsoft.public.sqlserver.setup)
    • Re: SQL Server 2005 SP2 fails in upgrading Database service
      ... When I clear the Certificate in the registry, I get the error that he is ... What you need to do to allow SQL Server to start successfully is to check ... This is an informational message only; no user action is ...
      (microsoft.public.sqlserver.setup)