Thor Logo dbatools

Security

Enable-DbaHideInstance

Gareth Newman (@gazeranco), ifexists.blog

Enable-DbaHideInstance View Source Gareth Newman (@gazeranco), ifexists.blog Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Enables the Hide Instance setting to prevent SQL Server Browser service from advertising the instance. Description Enables the Hide Instance setting in the SQL Server network configuration registry, which prevents the instance from responding to SQL Server Browser service enumeration requests. This security setting makes the instance invisible to network discovery tools and requires clients to specify the exact port number or use a SQL Server alias to connect.

Read more

Get-DbaComputerCertificate

Chrissy LeMaire (@cl), netnerds.net

Get-DbaComputerCertificate View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves X.509 certificates from Windows certificate stores that can be used for SQL Server TLS encryption Description Scans Windows certificate stores to find X.509 certificates suitable for enabling SQL Server network encryption. By default, returns only certificates with Server Authentication capability from the LocalMachine\My store, which are the certificates SQL Server can actually use for TLS connections.

Read more

Get-DbaCredential

Garry Bargsley (@gbargsley), blog.garrybargsley.com

Get-DbaCredential View Source Garry Bargsley (@gbargsley), blog.garrybargsley.com Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves SQL Server Credentials configured for external authentication and resource access. Description Retrieves SQL Server Credentials that are stored securely on the server and used by SQL Server services to authenticate to external resources like file shares, web services, or other SQL Server instances. These credentials are essential for operations like backups to network locations, accessing external data sources, or running SQL Agent jobs that interact with external systems.

Read more

Get-DbaDbAsymmetricKey

Stuart Moore (@napalmgram), stuart-moore.com

Get-DbaDbAsymmetricKey View Source Stuart Moore (@napalmgram), stuart-moore.com Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves asymmetric keys from SQL Server databases for encryption management and security auditing Description Retrieves asymmetric keys stored in SQL Server databases, including their encryption algorithms, key lengths, owners, and thumbprints. This function is essential for security audits and encryption key management, allowing DBAs to inventory all asymmetric keys across databases without manually querying system catalogs.

Read more

Get-DbaDbCertificate

Chrissy LeMaire (@cl), netnerds.net

Get-DbaDbCertificate View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves database-level certificates from SQL Server databases for security auditing and certificate management Description Retrieves all certificates stored within SQL Server databases, providing detailed information about each certificate including expiration dates, issuers, and encryption properties. This function is essential for DBAs managing Transparent Data Encryption (TDE), Service Broker security, or other database-level encryption features.

Read more

Get-DbaDbEncryptionKey

Chrissy LeMaire (@cl), netnerds.net

Get-DbaDbEncryptionKey View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves Transparent Data Encryption (TDE) database encryption keys from SQL Server databases Description Retrieves detailed information about Transparent Data Encryption (TDE) database encryption keys including encryption state, algorithm, and certificate details. This function helps DBAs audit encrypted databases, verify TDE configuration, and gather key information for compliance reporting or troubleshooting encryption issues.

Read more

Get-DbaDbMasterKey

Chrissy LeMaire (@cl), netnerds.net

Get-DbaDbMasterKey View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves database master key information from SQL Server databases Description Retrieves database master key objects and their metadata from one or more SQL Server databases. Database master keys are used to encrypt sensitive data through features like Transparent Data Encryption (TDE), column-level encryption, and certificate-based encryption.

Read more

Get-DbaExtendedProtection

Claudio Silva (@claudioessilva), claudioessilva.eu

Get-DbaExtendedProtection View Source Claudio Silva (@claudioessilva), claudioessilva.eu Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves Extended Protection authentication settings from SQL Server network configuration. Description Retrieves the Extended Protection setting for SQL Server instances to help assess authentication security posture. Extended Protection is a Windows authentication enhancement that helps prevent credential relay attacks by validating channel binding and service principal names.

Read more

Get-DbaForceNetworkEncryption

Chrissy LeMaire (@cl), netnerds.net

Get-DbaForceNetworkEncryption View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves Force Network Encryption configuration from SQL Server’s network settings Description Retrieves the Force Network Encryption setting and associated certificate from SQL Server’s network configuration stored in the Windows registry. This setting determines whether SQL Server requires all client connections to use encryption, preventing unencrypted communication.

Read more

Get-DbaHideInstance

Tracy Boggiano @TracyBoggiano, databaseuperhero.com

Get-DbaHideInstance View Source Tracy Boggiano @TracyBoggiano, databaseuperhero.com Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Retrieves the Hide Instance setting from SQL Server registry configuration Description Retrieves the Hide Instance setting from the Windows registry for SQL Server instances. This security setting controls whether the instance appears when clients browse the network for available SQL Server instances. When Hide Instance is enabled, the SQL Server instance will not respond to broadcast requests from SQL Server Browser service, making it invisible to network discovery tools.

Read more
Page 2 of 6