Need trusted certificate remedy for SQL server

Question

I am running SQL server Express using SQL server driver 10.00.10941.2130. The application is totally on my home computer. No one else has access to the application. It has been recommended that I use the latest driver issued by Microsoft. I tried to update the driver and received the following error message: "[Microsoft][ODBC Driver 18 for SQL Server]SSL Provider: The certificate chain was issued by an authority that is not trusted."

My questions are (1) should I use a more current driver and (2) if yes, what is the easiest and least costly way of getting a trusted certificate?

Answer 1

That's indeed the llatest version of the ODBC driver. Microsoft have changed their APIs so that all no default to require a trusted certificate.

You have three options:

• In the connection string, specify Encrypt=Optional.
• In the connection string, specify Trust Server Ceritifcate=yes.
• Install a self-signed certificate as described here: https://codekabinett.com/rdumps.php?Lang=2&targetDoc=create-install-ssl-tls-certificate-sql-server.

Answer 2

Hi @Al C ,

The error occurs because of a change in the default behavior of the client drivers,

You do not necessarily need to use the latest driver, the one of the solutions is to use the Microsoft ODBC Driver 17 for SQL Server

Or you can try to change the value of the Encrypt setting of the application connection string property to No or Optional, add Encrypt = Optional;

If you're using a DSN, change the encryption setting from Mandatory to Optional.

Please refer to this article, you can try its solutions:

"The certificate chain was issued by an authority that is not trusted" error after upgrading SNAC applications

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Thank you. My apologies for not accepting. I found your suggestions truly helpful as well.

Al