Forum Discussion
Setting up a connection to unencrypted SQL database?
- 1 year ago
Hi UnencryptedSQL ,
Thank you for reaching out to the Microsoft Community Forum.
Microsoft's On-premises Data Gateway typically requires an encrypted connection (SSL/TLS) when connecting to SQL Server. Unencrypted connections are increasingly blocked due to security concerns.
Please refer below points.1.By default, Power BI and the On-premises Data Gateway enforce encrypted connections to SQL Server. If SQL Server does not support or allow encrypted connections, the gateway connection will fail, even with correct credentials.
2.While there isn’t a specific KB that flat-out says "unencrypted SQL connections are not allowed," the encryption requirement is embedded in various places:
3.In Microsoft Learn docs, encryption is always assumed or enabled. Microsoft’s error messages and community posts (like the one you linked) repeatedly point to this being a non-configurable requirement for security.
4.There is no supported workaround to disable encryption enforcement via the gateway. Some users have tried modifying connection strings with Encrypt=False, but this is either ignored or overridden by the gateway.
Even if not, it violates Microsoft's security recommendations and may cause unexpected behavior.
Enable encryption on your SQL Server: Use a self-signed certificate if needed (you don't need a CA-issued cert for internal use). Set Force Encryption = Yes on the SQL Server Network Configuration. Ensure the gateway can trust the SQL certificate.
Please refer below Microsoft articles.
Configure SQL Server Database Engine for encryption - SQL Server | Microsoft Learn
Connect to SQL Server with strict encryption - SQL Server | Microsoft Learn
If my response has resolved your query, please mark it as the Accepted Solution to assist others. Additionally, a 'Kudos' would be appreciated if you found my response helpful.
Thank you
The On-premises Data Gateway in Power BI requires encrypted connections (SSL/TLS) to SQL Server, and unencrypted connections are no longer supported due to security concerns. If SQL Server doesn’t allow encryption, the gateway connection will fail even with correct credentials. There’s no option to disable this in the gateway, and attempts to use Encrypt=False are either ignored or blocked. The recommended approach is to enable encryption on your SQL Server, which can be done with a self-signed certificate if needed, and then set Force Encryption = Yes in SQL Server Network Configuration so the gateway can trust the certificate. This aligns with Microsoft’s security guidelines and avoids unexpected connection issues.