If DPA is unable to connect to a SQL Server instance that requires SSL connections, the resolution depends on which driver is used to connect to the instance:

• DPA 2021.3 and later can use either the jTDS driver or the Microsoft JDBC driver:
  • If the instance was registered in DPA 2021.3 and later, the MS JDBC driver is used.

The following section describes how to resolve this issue for both drivers. 

SSL was enabled on monitored SQL Server instances.

Determine which driver is being used

To find out which driver is being used, open the Update DB Instance Connection Wizard:

1. From the DPA menu in the upper-right corner, click Options.
2. Under Monitor Setup > Database Instances, click Update Connection.
3. Select the database instance, and click Next.
4. On the Update Monitored Database Instance Connection Information page, look at the available properties:
   • If the MS JDBC driver is used, the SSL mode drop-down menu is shown:
     
   • If the jTDS driver is used, the SSL mode drop-down menu is not shown, but the Microsoft JDBC Driver option is there to allow you to change drivers:
     

If the Microsoft JDBC driver is used

On the Update Monitored Database Instance Connection Information page, select the appropriate SSL mode option, depending on how restrictive the settings are for SSL on your server. The options (from least to most secure) are: 

• Disable
• No certificate validation
• Validate server certificate
• Validate server certificate and match hostname

Note: If the ForceEncryption flag is set to Yes on the SQL Server database instance, all communication with the instance must be encrypted. Do not choose Disable as the SSL mode.

If the jTDS driver is used

On the Update Monitored Database Instance Connection Information page, update the connection information to get DPA to request the SSL connection. In the JDBC URL Properties, and add the following:

ssl=request

If there are other entries in this field, you can add this with a semicolon as a separator. For example: 

NTLMv2=true;ssl=request.

If this does not resolve the issue, enter the following property instead:

ssl=require

If the DPA repository server requires SSL connections

1. Open the repo.properties file in a text editor. The file is in the following location:
   <DPA_home>/iwc/tomcat/ignite_config/idc/repo.properties 
2. Add one of the following, depending on how restrictive the settings are for SSL on your server:
   • repo.jdbcDriverProperties=useSSL\=request
   • repo.jdbcDriverProperties=useSSL\=require 
3. Save the file.
4. Restart DPA.

Bulk update

1. If you have multiple DPA instances and many SQL Server instances monitored with each DPA repository then you can execute the following SQL statement on the DPA repository database(s):

   UPDATE COND SET CONN_ADD_PROPS = 'useNTLMv2=true;ssl=request' where DB_TYPE = 'SQL Server';
   UPDATE COND SET CONN_URL_PROPS = 'useNTLMv2=true;ssl=request' where DB_TYPE = 'SQL Server';

2. Restart DPA.