E1: DB: Is SQL Server ForceEncryption Supported On E1? (Doc ID 2970062.1)

Last updated on AUGUST 28, 2023

Applies to:

Goal

SQL Server has the capability to force encrypted communications for all clients via the ForceEncryption option in the SQL Server Network Configuration.

Is this encryption setting certified with EnterpriseOne?

Here's the ask from the customer's infrastructure/security team:

Remediation Advice
It is advised to ensure that encryption is enforced on the SQL server to mitigate the possibility of any cleartext credentials being captured.

How to configure encryption settings in SQL Server:

1. In SQL Server Configuration Manager, expand SQL Server Network Configuration, right-click Protocols for <>, and then select Properties.
2. On the Flags tab, in the ForceEncryption box, select Yes, and then select OK to close the dialogue box.
3. Please ensure that the Default IPv6 vulnerability is also addressed to ensure that once encryption is enforced, that the password hashes cannot be captured.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.