Remove-DbaNetworkCertificate View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Removes the SSL certificate configuration from SQL Server network encryption settings
Description Removes the certificate thumbprint from SQL Server’s network encryption configuration by clearing the Certificate registry value in SuperSocketNetLib. This disables forced SSL encryption for client connections and returns the instance to unencrypted or optional encryption mode.
Restore-DbaDbCertificate View Source Jess Pomfret (@jpomfret), jesspomfret.com Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Restores database certificates from .cer and .pvk files into SQL Server databases.
Description Restores database certificates and their associated private keys from backup files into SQL Server databases. This function is essential for recovering certificates used in TDE (Transparent Data Encryption), backup encryption, Always Encrypted, and other SQL Server security features after database migrations, disaster recovery, or server rebuilds.
Chrissy LeMaire (@cl), netnerds.net | Refactored by Andreas Jordan (@andreasjordan)
Set-DbaNetworkCertificate View Source Chrissy LeMaire (@cl), netnerds.net , Refactored by Andreas Jordan (@andreasjordan) Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Sets the network certificate for SQL Server instance
Description Sets the network certificate for SQL Server instance in two possible ways. This setting is found in Configuration Manager.
Without the Certificate or Thumbprint parameter (Way One): Calls Test-DbaNetworkCertificate to retrieve
Start-DbaDbEncryption View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Implements Transparent Data Encryption (TDE) on user databases with automated key infrastructure and backup management
Description Automates the complete TDE implementation process from start to finish, handling all the complex key management steps that would otherwise require multiple manual commands. This function sets up the entire encryption infrastructure including master keys, certificates or asymmetric keys, database encryption keys, and automatically backs up all encryption components to protect against data loss.
Stop-DbaDbEncryption View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Disables Transparent Data Encryption (TDE) on all user databases across a SQL Server instance
Description Disables Transparent Data Encryption (TDE) on all user databases within a SQL Server instance by calling Disable-DbaDbEncryption for each encrypted database found. This function automatically excludes system databases (master, model, tempdb, msdb, resource) and only processes databases that currently have encryption enabled.
Test-DbaComputerCertificateExpiration View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Identifies SSL/TLS certificates that are expired or expiring soon on SQL Server computers
Description Scans computer certificate stores to find certificates that are expired or will expire within a specified timeframe. This function focuses on certificates used for SQL Server network encryption, helping DBAs proactively identify potential connection failures before they occur.
Test-DbaNetworkCertificate View Source the dbatools team + Claude Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Tests network certificate configuration and suitability for SQL Server instances
Description Tests network certificate configuration for SQL Server instances in two ways.
Without the Thumbprint parameter (Way One): Calls Get-DbaNetworkConfiguration to retrieve
information about the currently configured certificate and available suitable certificates.
Returns a summary indicating whether the configured certificate is valid for the minimum
dbatools