Set-DbaExtendedProtection View Source Claudio Silva (@claudioessilva), claudioessilva.eu Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Configures Extended Protection for Authentication on SQL Server network protocols
Description Modifies the Extended Protection registry setting for SQL Server network protocols to enhance connection security. Extended Protection helps prevent authentication relay attacks by requiring additional authentication at the network protocol level.
This security feature is particularly useful in environments where you need to protect against man-in-the-middle attacks or when connecting over untrusted networks.
Chrissy LeMaire (@cl), netnerds.net | Refactored by Andreas Jordan (@andreasjordan)
Set-DbaNetworkCertificate View Source Chrissy LeMaire (@cl), netnerds.net , Refactored by Andreas Jordan (@andreasjordan) Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Sets the network certificate for SQL Server instance
Description Sets the network certificate for SQL Server instance in two possible ways. This setting is found in Configuration Manager.
Without the Certificate or Thumbprint parameter (Way One): Calls Test-DbaNetworkCertificate to retrieve
Set-DbaPrivilege View Source Klaas Vandenberghe (@PowerDbaKlaas) Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Grants essential Windows privileges to SQL Server service accounts for optimal performance and security.
Description Configures critical Windows privileges for SQL Server service accounts including Lock Pages in Memory (LPIM), Instant File Initialization (IFI), Logon as Batch, Logon as Service, Generate Security Audits, and Create Global Objects.
Start-DbaDbEncryption View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Implements Transparent Data Encryption (TDE) on user databases with automated key infrastructure and backup management
Description Automates the complete TDE implementation process from start to finish, handling all the complex key management steps that would otherwise require multiple manual commands. This function sets up the entire encryption infrastructure including master keys, certificates or asymmetric keys, database encryption keys, and automatically backs up all encryption components to protect against data loss.
Stop-DbaDbEncryption View Source Chrissy LeMaire (@cl), netnerds.net Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Disables Transparent Data Encryption (TDE) on all user databases across a SQL Server instance
Description Disables Transparent Data Encryption (TDE) on all user databases within a SQL Server instance by calling Disable-DbaDbEncryption for each encrypted database found. This function automatically excludes system databases (master, model, tempdb, msdb, resource) and only processes databases that currently have encryption enabled.
Test-DbaComputerCertificateExpiration View Source Chrissy LeMaire (@cl), netnerds.net Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Identifies SSL/TLS certificates that are expired or expiring soon on SQL Server computers
Description Scans computer certificate stores to find certificates that are expired or will expire within a specified timeframe. This function focuses on certificates used for SQL Server network encryption, helping DBAs proactively identify potential connection failures before they occur.
Test-DbaInstantFileInitialization View Source the dbatools team + Claude Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Tests whether Instant File Initialization (IFI) is properly configured for SQL Server Engine service accounts.
Description Audits Instant File Initialization (IFI) configuration for all SQL Server Engine services on the specified computer(s).
IFI allows SQL Server to skip zeroing out data file space during file creation and auto-growth operations, which can dramatically speed up database creation, restore operations, and auto-growth events.
Test-DbaKerberos View Source Claude + Andreas Jordan + Chrissy LeMaire Windows, Linux, macOS On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Tests Kerberos authentication configuration for SQL Server instances by performing comprehensive diagnostic checks.
Description This function performs a comprehensive suite of diagnostic checks to troubleshoot Kerberos authentication issues for SQL Server instances. It addresses the most common causes of Kerberos authentication failures including SPN configuration problems, DNS issues, time synchronization errors, service account configuration, network connectivity problems, and security policy misconfigurations.
Test-DbaNetworkCertificate View Source the dbatools team + Claude Windows only On this page: Synopsis · Description · Syntax · Examples · Parameters · Outputs Synopsis Tests network certificate configuration and suitability for SQL Server instances
Description Tests network certificate configuration for SQL Server instances in two ways.
Without the Thumbprint parameter (Way One): Calls Get-DbaNetworkConfiguration to retrieve
information about the currently configured certificate and available suitable certificates.
Returns a summary indicating whether the configured certificate is valid for the minimum
TLDR: This error is expected and the change is legitimate. To update, switch to Install-Module, then slap on the -SkipPublisherCheck and -Force parameters and continue your update.
Install-Module dbatools -Force -SkipPublisherCheck I’ve always been very proud that dbatools is Code Signed like a “real” application. These certs prove the identity of the creator and help prevent tampering. The certificates cost a bunch of money and are hard to obtain. You gotta send in tons of paperwork, including your passport and business papers.
dbatools