How to figure out if a SQL Server instance has ForceEncryption turned on

09 Jun 2014

If you need to find out if a SQL Server instance has ForceEncryption turned on at a server level, the only reasonable way to do this is read it through the registry. You must look for:

  1. HKEY_LOCAL_MACHINE\
  2. SOFTWARE\Microsoft\Microsoft SQL Server\
  3. MSSQL<version>.<instancename>\MSSQLServer\SuperSocketNetLib\ForceEncryption

May I also note that at least for SQL Server 2008 R2 where there’s the DMV for reading the sql server config in the registry sys.dm_server_registry this value is not tracked. You must resort to using xp_regread.

Add new comment

The content of this field is kept private and will not be shown publicly.

Restricted HTML

  • Allowed HTML tags: <a href hreflang target> <em> <strong> <cite> <blockquote cite> <pre> <ul type> <ol start type> <li> <dl> <dt> <dd> <h4 id> <h5 id> <h6 id>
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.

Get a quote in 24 hours

Wether a huge commerce system, or a small business website, we will quote the project within 24h of you pressing the following button: Get quote