Overview

To utilize a DirectSQL connection, you will need to follow the instructions in the link below to configure the local SQL Server to use an encrypted connection. Note that a .pfx-formatted SSL certificate is required. When using a SSL certificate, Square 9 recommends certificate providers like Namecheap.com, PositiveSSL.

The steps below should be performed by local IT. Cloud Support can assist with the application of the certificate, but we cannot acquire the certificate, nor make the relevant DNS entries on our client’s behalf.

Requirements

To configure a DirectSQL Connection, you will need:

1. Microsoft SQL Server installed on a on-premise workstation or server

2. A SSL Certificate in a .PFX format

3. Internet Access for the SQL Server to allow the machine to connect to the Square 9 Cloud

4. An External IP Address

5. A Fully Qualified Domain Name with a DNS Entry that points to your SQL Server

Configuring the Connection

1. Configure SQL Server encryption

2. Configure TCP/IP on the SQL Server.

3. Ensure that the SQL Server port (usually 1433) is accessible over the internet, and that a DNS record points to the on-premises SQL Server.

   1. This should be opened on your firewall on an external IP Address, see the whitelist URLs below.

...

Server=<sqlserverfqdn>;Database=<dbname>;UID=<user>;PWD=<password>;

Configuring the Connection

1. Configure SQL Server encryption

2. Configure TCP/IP on the SQL Server.

3. Ensure that the SQL Server port (usually 1433) is accessible over the internet, and that a DNS record points to the on-premises SQL Server.

   1. This should be opened on your firewall on an external IP Address, see the whitelist URLs below.

4. Configure a SQL Server User with a strong password and “sysadmin” privileges.

Next, ensure that the SQL Server port is accessible over the internet, and that a DNS record points to the on-premises SQL Server.

Testing the Connection

If you have successfully configured the connection, you should be able to connect to your server via SQL Server Management Studio.

Optional Whitelists

You can restrict access to the SQL server by whitelisting the following domains:

• <subdomain>.mysquare9.com

• capture-<subdomain>.mysquare9.com

Certificate Expiration

SSL Certificates have a lifetime of 1 Year. This means every year you will need to update your SQL Server’s SSL Certificate.