Forum Discussion
Feature Requests: Implement Encrypted connection to SAP HANA
When connecting to a SAP HANA instance with DirectQuery and the option "Treat HANA as a relational database" then Power BI Desktop reports that it's not possible to encrypt the connecting with DirectQuery.
It just says: Something went wrong
Connecting encryption for "SapHana" isn't supported in DirectQuery mode. Turn off encryption for this data source or switch
This error message shows when both the SAP ODBC driver is using mscrypto or SAP Common Crypto Library.
It beats me to understand why Microsoft is not taking security as a top priority.
When changing to "Import" or DirectQuery without the option "Treat HANA as relational database", the encryption is working.
The security model for different users only have access to some rows, as implemented in HANA, can only be enforced when using DirectQuery.
And it's seems that if you do not enable "Treat HANA as relational database" there is lot of features missing for Dashboard development.
This difference in product safety implementation is just so weird. What did the Microsoft developers think?
In the HANA database in SYS.M_CONNECTIONS, it's possible to see that the column CLIENT_APPLICATION is different for the two cases.
Microsoft. Please shape up and take security as first priority.
5 Replies
Hello tlinnet ,
you could reach out to microdoft support and discuss this issue directly with them https://support.powerbi.com
Hi, tlinnet
For your question I think you can connect to SAP HANA directly in Power BI via Direct Query connection mode.
You can also enable encryption for SAP HANA thus increasing security, you can read this document to help you: SAP HANA encryption - Power Query | Microsoft Learn
Best Regards
Yilong Zhou
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Step 1: Configure connection
Step 2: Make settinng in options
Step 3: Get data via DirectQuery
Step 4: Power BI cannot encrypt
And if you remove the tick to "Validate server certificate", but still have ticked "Encrypt connection", you get to select which table to extract, but after this, it fails with:
Hi,
I tried. I had 19 mails in ping-pong with Microsoft Service over 4 weeks.
The quality of that service level was 1 out 5 stars.
The technician just sent links to randomly outdated forum messages and documentation.
It was pretty clear he had no clue about what was going on, and never tried to reproduce the problem on his part.
Terrible experience.
