Always Encrypted - Importing Certificates for each workstation

[NewsArchive]

Hi Friedrich,

I don't know if you've seen the thread in Clarion10 (and clc) subject
'Encrypted MS SQL columns'
about how to get the new SQL Server "Always Encrypted" feature working
in Clarion?

Well with Guennadi and Federico's help we've got it working.

Part of the way it works requires the creation of certificates (either
in an Azure account or [more likely] in the local certificate store)
When you distribute the database and application you then need to
export those encryption certificates and import them onto each
workstation

https://www.mssqltips.com/sqlservertip/4814/exporting-and-importing-sql-server-always-encrypted-certificates-for-client-access/

Is this something that SetupBuilder can (or could) automate?

Graham

[NewsArchive]

Hi Graham,

I think the MS certutil.exe command line tool can export and import
certificates. Perhaps you can call this from within SetupBuilder to
automate it? But I don't know if certutil can be redistributed?!

Friedrich

[NewsArchive]

Thanks Friedrich,

I'll do some digging re certutil.
I guess with GDPR around the corner it may be an issue for lots of
people.

Graham