Help - Encrypting the Communication Between Project and HDB

Encrypting the Communication Between Project and HDB

You can encrypt the communication between a project (System Server) and the linked HDB (SQL Server).

Encrypting the communication is only useful if the system server and the SQL Server are located on different computers.

NOTE:

Encrypting the communication will slow down performance.

You must set the encryption in the System Management Console (SMC) and in the SQL Server Configuration Manager.

Before you encrypt the communication between the project and the HDB, you must link the SQL server instance to the SMC. Host certificates are always issued to the full name of the computer (host name + domain). You must link the SQL server instance, using its Fully Qualified Domain Name (FQDN), to the SMC.

Link the SQL Server Instance to the SMC

1.: In the SMC tree select History Databases.

2.: Open the SQL Servers expander.

3.: Type the SQL server instance name with the fully qualified domain name (host name + domain) in the Manual search field and click Search Server.

⇨: The fully qualified server instance name appears in the list in the SQL Servers expander.

4.: Select the server instance in the list and select the Linked checkbox.

5.: Create your HDB on this instance.

Set the Encryption in the System Management Console

1.: From the Windows Start menu, select the Desigo CC SMC.

2.: In the SMC tree, select Projects > [Project Name].

3.: Open the Server Project Information expander.

4.: In the Linked HDB field, select the HDB whose communication you want to encrypt.

5.: Select the Encrypted check box.

6.: Click Save.

Set the Encryption in the SQL Server Configuration Manager

▷: TCP/IP must be switched on.

1.: In the Start menu, select Start > All Programs > Microsoft SQL Server [Date] > Configuration Tools and click SQL Server Configuration Manager.

2.: Right-click Protocols for [HDB Name] and select Properties.

3.: Click the Certificate tab.

4.: Select a valid hostname certificate.

5.: Click the Flags tab.

6.: In the Force Encryption drop-down list, select one of the following:

-: No:

⇨: If the Encrypted check box in the SMC is selected, the communication will be encrypted.

⇨: If the Encrypted check box in the SMC is not selected, the communication will not be encrypted.

-: Yes:

⇨: If the Encrypted check box in the SMC is not selected, the HDB will not connect to the project. This means, all communication must be encrypted.

7.: Click Apply and OK.