Skip to content

Commit 2567380

Browse files
authored
Update azure-stack-sql-resource-provider-hosting-servers.md
1 parent dcc29c1 commit 2567380

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

azure-stack/operator/azure-stack-sql-resource-provider-hosting-servers.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ You can create an admin user with lower privileges than a SQL sysadmin. The user
6767
The following information provides additional security guidance:
6868

6969
* All Azure Stack Hub storage is encrypted using BitLocker, so any SQL instance on Azure Stack Hub will use encrypted blob storage.
70-
* The SQL Resource Provider fully supports TLS 1.2. Ensure that any SQL Server that's managed through the SQL RP is configured for TLS 1.2 _only_ and the RP will default to that. All supported versions of SQL Server support TLS 1.2. For more information, see [TLS 1.2 support for Microsoft SQL Server](https://support.microsoft.com/help/3135244/tls-1-2-support-for-microsoft-sql-server).
70+
* The SQL Resource Provider fully supports TLS 1.2. Ensure that any SQL Server that's managed through the SQL RP is configured for TLS 1.2 _only_ and the RP will default to that. All supported versions of SQL Server support TLS 1.2.
7171
* Use SQL Server Configuration Manager to set the **ForceEncryption** option to ensure all communications to the SQL server are always encrypted. For more information, see [To configure the server to force encrypted connections](/sql/database-engine/configure-windows/enable-encrypted-connections-to-the-database-engine?view=sql-server-2017&preserve-view=true#to-configure-the-server-to-force-encrypted-connections).
7272
* Ensure any client app is also communicating over an encrypted connection.
7373
* The RP is configured to trust the certificates used by the SQL Server instances.

0 commit comments

Comments
 (0)