How to fix SQL Server connection Security - Encryption value to Optional by default?

Question

Hi,

We have mass deployed SSMS 20.2 to multiple users and observed that the encryption option is set to "Mandatory" by default when connecting to the server. We would like to change this default setting to "Optional."

Could you please help us with a solution for this? Specifically, where can we make this change—in the registry key or any other configuration file?

Answer 1

I don't think this is possible. For OLE DB, I seem to recall that there are registry settings in the other direction, to disallow Optional. Which makes sense, this is an insecure option.

A better option would be to install proper certificates and distribute these. Or install a certificate with a trusted root certificate.

In any case, one the user has set an option for a server, SSMS seems to remember it, so it is a passing phase.

Answer 2

Hi @Sagiraju, Balakrishna,

• The value of True (Encrypt connection option checked, or enabled) now maps to Mandatory for Encryption.
• The value of False (Encrypt connection option unchecked, or disabled) now maps to Optional for Encryption.
• The Encryption property is now set to Mandatory by default.

You cannot change the default setting.

Regards，

Zoe Hui

---

If the answer is helpful, please click "Accept Answer" and upvote it.