Encrypt all data transmitted between MSSQL Ciient and MSSQL Server using "Force Encryption" flag on the MSSQL server.

Products

• CA Risk Authentication

Issue/Introduction

MSSQL Server's flag "Force Encryption" forces the MS SQL Client’s to connect to the MS SQL server to encrypt the data while that data is in transit.  In other words, client (AA - Advanced Authentication server) must use encryption while establishing the connection to the AA database. Refer to Force Encryption Flag on MSSQL server

The Force Encryption" can be configured on the SQL server via SQL Server Configuration Manager > SQL Server Network Configuration > Protocols (for your Instance name) > Properties > Flags > Force Encryption

Currently, this "Force Encryption" feature is only supported at Advanced Authentication (AA) version  9.1.5.  For all other AA versions, socket closed exception is seen as shown below.

In AA webfort logs (“Socket Closed” on trying to connect to

08/13/24 09:01:01.534 WARN  STARTUP      00007596 00WFMAIN - ArDBConnection::connect: Connection to database [arcotsn]. user [aaVersionsp3user] failed. Error detail [SQL State:08S01, Native Code: 0, ODBC code: [CA AA][ODBC SQL Server Wire Protocol driver]Socket closed.] 
08/13/24 09:01:01.534 WARN  STARTUP      00007596 00WFMAIN - ArDBPool::createNewConnections: Failed to grow the pool [(primary)] : Error [ArDBPool::createDBContextObjs: SQL State:08S01, Native Code: 0, ODBC code: [CA AA][ODBC SQL Server Wire Protocol driver]Socket closed.]

In SQL server logs:

2024-08-13 09:01:00.84 Logon       Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library. [CLIENT: 127.0.0.1]

 

 

Environment

Advanced Authentication Version 9.1.5 (aka AA SP5)

• CA Risk Authentication
• CA Strong Authentication

Cause

Requirement to Encrypt all data transmitted between MSSQL Server and MSSQL Client 

Resolution

This capability is only supported and certified at Advanced Authentication version 9.1.5 (aka AA SP5).  Please upgrade to AA 9.1.5.