TLS1.2 Cipher suites for AlawaysON Endpoint

Question

I am looking for Cipher Suite details for TLS1.2 for AlwaysON endpoint. From this doc https://support.microsoft.com/en-us/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe I understood that TLS1.2 is supported for AlwaysON Endpoint, but I could not find any info on Ciphers.

I have consulted the following docs but I did not get the information I am looking for

https://techcommunity.microsoft.com/t5/sql-server-blog/tls-1-2-support-for-sql-server-2008-2008-r2-2012-and-2014/ba-p/384613
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-server
https://support.microsoft.com/en-us/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe
https://support.microsoft.com/en-us/topic/kb3135852-fix-the-encrypted-endpoint-communication-with-tls-1-2-fails-when-you-use-sql-server-b9945053-3c10-fd5b-8fd6-e08909dd1361

Could someone point me to the right document, if there is any?

Thanks
Josh

Answer 1

Hi @Chinni ,

When enabling channel encryption between the application and SQL Server, users may wonder what encryption algorithm is being used to protect their data. Unfortunately, this isn't an easy question to answer.

A cipher suite is a set of cryptographic algorithms that specifies the algorithm for key exchange, encryption, and message authentication. What the best cipher suite to use is negotiated by SSL/TLS and depends upon the cipher suites supported by the OS on the client and the server. The client will provide the server with a list of its cipher suites from the negotiated protocol. The server will chose the strongest cipher suite that it is able to support from the client's list.

Refer to below MS documents, hope these could help you.

SSL Cipher Suites used with SQL Server
Server cipher suites and TLS requirements
Cipher Suites in TLS/SSL (Schannel SSP)

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".