Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • Excrypt HSM (formerly Vectera Plus), firmware 7.2.x.x or later.

​
Supported operating systems

  • Windows 10 or later

​
Required access

  • An account on the Excrypt HSM with administrator permissions to create application partitions, identities, TLS PKI, and update system settings.
  • Local administrator privileges on the computer where Microsoft SQL Server is installed.

​
Network and firewall

  • Allow outbound TCP port 9100(default Excrypt port) from the computer running Microsoft SQL Server to the Excrypt HSM, specified by FQDN (for example, hsm.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Excrypt HSM FQDN(s) from inspection. Configure the Excrypt HSM with a FQDN so the exemption applies.

​
Other

  • Microsoft SQL Server 2016 or later
  • Microsoft SQL Server Management Studio (SSMS)
  • Futurex CNG 5.4 or later (32-bit)
You must use the 32-bit version of FXCNG for this integration. Microsoft SQL Always Encrypted is a 32-bit application and cannot integrate with the 64-bit version of FXCNG.