How to figure out if a SQL Server instance has ForceEncryption turned on

09 Jun 2014

If you need to find out if a SQL Server instance has ForceEncryption turned on at a server level, the only reasonable way to do this is read it through the registry. You must look for:

  1. HKEY_LOCAL_MACHINE\
  2. SOFTWARE\Microsoft\Microsoft SQL Server\
  3. MSSQL<version>.<instancename>\MSSQLServer\SuperSocketNetLib\ForceEncryption

May I also note that at least for SQL Server 2008 R2 where there’s the DMV for reading the sql server config in the registry sys.dm_server_registry this value is not tracked. You must resort to using xp_regread.

Tags

Leave a comment

Leaving new comments is temporarily disabled. Please leave your comments and ask questions via the contact page.

Get a quote in 24 hours

Wether a huge commerce system, or a small business website, we will quote the project within 24h of you pressing the following button: Get quote