How to test TLS 1.3 with SQL Server 2022 with TDS 8.0 and TLS 1.3 enabled.

Question

Hi,

I am struggling to test the TLS 1.3 with SQL server 2022. As the msdn document mention its now available for use.

We cannot start SQL server if TLS1.2 is disabled..
I have both 1.2 and 1.3 enabled with TDS 8.0 in place for sql server - Added host certificate for it also.
When I try to connect to sql server using SSMS I get below error in event viewer -

The SQL Server or the endpoint is configured to accept only strict (TDS 8.0 and above) connections. The connection has been closed.

Also, I can test the connection is working or not using OLE DB driver's provided by MS from below link -
https://learn.microsoft.com/en-us/sql/relational-databases/security/networking/connect-with-strict-encryption?view=sql-server-ver16

While connecting to SSMS with TLS 1.2 disabled - I get below error -

Earlier I have created the case :https://learn.microsoft.com/en-us/answers/questions/1097203/how-to-test-tls-13-is-enabled-and-sql-is-using-it.html?childToView=1117944#comment-1117944t.html

Answer 1

Hi @Basamma Nagonde ,

Please try to use the same account to reply.
In addition to the methods you know from the previous post, you can also see directly through the registry what protocols are enabled.
Locate the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL

Finally, please refer to this document: TDS 8.0 and TLS 1.3 support
To leverage TDS 8.0, SQL Server 2022 (16.x) added strict as an additional connection encryption type to SQL Server drivers (Encrypt=strict). Download the latest version of the ODBC or OLE DB drivers to use the strict connection encryption type.
From here, you can see the current version.

Best regards,
Seeya

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

SSMS uses the .NET System.Data.SqlClient API, which has not been updated for TDS 8.0 support as of this writing. You'll need to connect using an application that uses .NET Microsoft.Data.SqlClient 5.0 or the latest ODBC/OLE DB drivers (as you already have done successfully).

I expect tooling will be enhanced to better support TDS 8.0 at some point but I have not heard a timeframe.

Answer 3

Thanks, how can I test TLS 1.3 security for sql server. I want to verify can we see is SQL using TLS 1.3 or different protocol.
I know we have made all the required setting, but any way we can test?

Answer 4

Have you tested with SSMS 19 Preview 3? I believe that SSMS 19 uses the newer Microsoft.Data.SqlClient API, you may have better luck there.

Answer 5

I have all the latest versions on my machine, Windows 2022, SQL 2022, SSMS 19.3.
I dont see Strict connection type is SSMS to specify. Looks like still this is not available for use.