SSLMODE used by Gateway with Postgres server data source

[Anonymous]

Hi
 
When I connect to on-premise Postgres Server from PBI Desktop with Encryption turned on, the connection uses SSLMODE=verify-full. However, when I connect from Power BI Service Gateway (also with Encryption turned on) to the same on-premise server, it seems the connection uses SSLMODE=require (less secure, connection without server identity validation).
 
Is there a way to force Gateway to use SSLMODE=verify-full ?

Possibly the ssl mode is enforced by built-in Postgres driver.If so, how to force such driver to use verify-full operaional mode?
 
Dan

[v-xicai]

Hi @Anonymous ,

You may use the ODBC connector to get PostgreSQL server data source in Power BI Desktop, and force the SSLMode=verify-full, see more details: Tutorial: how to configure Power BI to connect to PGSQL ran by Meiro .

Driver={PostgreSQL Unicode(x64)};Server={host_domain};Port={port};Database={name_of_ the_database};SSLMode=require;UseUnicode=1;

Further references under this link.

Best Regards,

Amy 

Community Support Team _ Amy

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous]

Hi @v-xicai 

Thank you for reply.

In the current set up, Power BI Gateway uses native Postgres driver, so ODBC is not an option here.

In the case of ODBC, you are right, I can set up verify-full, however I would like to achieve the same by configuring Postgres driver (NpgSql).

From Postgres specification, I can see that this driver uses two parameters: SSL Mode and Trust Server Certificate.

https://www.npgsql.org/doc/connection-string-parameters.html

but there is no way to 'force' this driver to use 'Trust Server Certificate = false' (required for verify-full functionality).

[v-xicai]

Hi @Anonymous ,

If you still have this issue for Power BI, you'd better create a support ticket in Power BI Support , Scroll down and click "CREATE SUPPORT TICKET", to get further help.

Best Regards,

Amy 

[Greg_Deckler]

@Anonymous Have you reviewed the documentation here?

https://docs.microsoft.com/en-us/power-bi/connect-data/service-gateway-onprem-indepth

Probably have to edit the gateway config file.

[Anonymous]

@Greg_Deckler 

Thank you for the hint. I haven't looked into this document yet. Let me read it and if I find the answer there, I will mark your answer as the solution.