Verify your environment meets these requirements.
Supported hardware
- Vectera Plus,
7.2.x.x or later.
Supported operating systems
Required access
- An account on the Vectera Plus with administrator permissions to create application partitions, identities, TLS PKI, and update system settings.
- Local administrator privileges on the computer where Microsoft SQL Server is installed.
Network and firewall
- Allow outbound TCP port 9100(default Excrypt port) from the computer running Microsoft SQL Server to the Vectera Plus, specified by FQDN (for example,
hsm.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Vectera Plus FQDN(s) from inspection. Configure the Vectera Plus with a FQDN so the exemption applies.
Other
- Microsoft SQL Server 2016 or later
- Microsoft SQL Server Management Studio (SSMS)
- Futurex CNG 5.4 or later (32-bit)
You must use the 32-bit version of FXCNG for this integration. Microsoft SQL Always Encrypted is a 32-bit application and cannot integrate with the 64-bit version of FXCNG.