You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/database-engine/configure-windows/configure-windows-service-accounts-and-permissions.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -177,7 +177,7 @@ Managed service accounts, group managed service accounts, and virtual accounts a
177
177
178
178
- <aname="GMSA"></a> **Group Managed Service Accounts**
179
179
180
-
A Group Managed Service Account is an MSA for multiple servers. Windows manages a service account for services running on a group of servers. Active Directory automatically updates the group managed service account password without restarting services. You can configure SQL Server services to use a group managed service account principal. Beginning with SQL Server 2014, SQL Server supports group managed service accounts on Windows Server 2012 R2 and later for standalone instances, failover cluster instances, and availability groups.
180
+
A Group Managed Service Account is an MSA for multiple servers. Windows manages a service account for services running on a group of servers. Active Directory automatically updates the group managed service account password without restarting services. You can configure SQL Server services to use a group managed service account principal. Beginning with SQL Server 2014, SQL Server supports group managed service accounts for standalone instances, and SQL Server 2016 and later for failover cluster instances, and availability groups.
181
181
182
182
To use a group managed service account for SQL Server 2014 or later, the operating system must be Windows Server 2012 R2 or later. Servers with Windows Server 2012 R2 require [KB 2998082](http://support.microsoft.com/kb/2998082) applied so that the services can log in without disruption immediately after a password change.
<Token>**THIS TOPIC APPLIES TO:**SQL Server (starting with 2014)Azure SQL DatabaseAzure SQL Data Warehouse Parallel Data Warehouse </Token>
Copy file name to clipboardExpand all lines: docs/linux/sql-server-linux-encrypted-connections.md
+6-1Lines changed: 6 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,7 +26,12 @@ Before getting started, you need to make sure your certificates follow these req
26
26
- The current system time must be after the Valid from property of the certificate and before the Valid to property of the certificate.
27
27
- The certificate must be meant for server authentication. This requires the Enhanced Key Usage property of the certificate to specify Server Authentication (1.3.6.1.5.5.7.3.1).
28
28
- The certificate must be created by using the KeySpec option of AT_KEYEXCHANGE. Usually, the certificate's key usage property (KEY_USAGE) also includes key encipherment (CERT_KEY_ENCIPHERMENT_KEY_USAGE).
29
-
- The Subject property of the certificate must indicate that the common name (CN) is the same as the host name or fully qualified domain name (FQDN) of the server computer. Note: Wild Card Certificates are supported.
29
+
- The Subject property of the certificate must indicate that the common name (CN) is the same as the host name or fully qualified domain name (FQDN) of the server computer. Note: Wild Card Certificates are supported.
30
+
31
+
## Configuring the OpenSSL Libraries for Use (Optional)
32
+
You can create symbolic links in the `/opt/mssql/lib/` directory that reference which `libcrypto.so` and `libssl.so` libraries should be used for encryption. This is useful if you want to force SQL Server to use a specific version of OpenSSL other than the default provided by the system. If these symbolic links are not present, SQL Server will load the default configured OpenSSL libraries on the system.
33
+
34
+
These symbolic links should be named `libcrypto.so` and `libssl.so` and placed in the `/opt/mssql/lib/` directory.
30
35
31
36
## Overview
32
37
TLS is used to encrypt connections from a client application to [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)]. When configured correctly, TLS provides both privacy and data integrity for communications between the client and the server. TLS connections can either be client initiated or server initiated.
Controls automatic options for [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1486
+
Controls automatic options for [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1487
1487
1488
-
AUTOMATIC_TUNING = { AUTO | INHERIT | CUSTOM }
1489
-
AUTO
1490
-
Setting the automatic tuning value to AUTO will apply Azure configuration defaults for automatic tuning.
1488
+
AUTOMATIC_TUNING = { AUTO | INHERIT | CUSTOM }
1489
+
AUTO
1490
+
Setting the automatic tuning value to AUTO will apply Azure configuration defaults for automatic tuning.
1491
+
1492
+
INHERIT
1493
+
Using the value INHERIT will inherit the default configuration from the parent server. This is especially useful if you would like to customize automatic tuning configuration on a parent server, and have all the databases on such server INHERIT these custom settings. Please note that in order for the inheritance to work, the three individual tuning options FORCE_LAST_GOOD_PLAN, CREATE_INDEX and DROP_INDEX need to be set to DEFAULT on databases.
1491
1494
1492
-
INHERIT
1493
-
Using the value INHERIT will inherit the default configuration from the parent server. This is especially useful if you would like to customize automatic tuning configuration on a parent server, and have all the databases on such server INHERIT these custom settings. Please note that in order for the inheritance to work, the three individual tuning options FORCE_LAST_GOOD_PLAN, CREATE_INDEX and DROP_INDEX need to be set to DEFAULT on databases.
1494
-
1495
-
CUSTOM
1496
-
Using the value CUSTOM, you will need to manually custom configure each of the automatic tuning options available on databases.
1495
+
CUSTOM
1496
+
Using the value CUSTOM, you will need to manually custom configure each of the automatic tuning options available on databases.
1497
+
1498
+
Enables or disables automatic index management `CREATE_INDEX` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1497
1499
1498
-
Enables or disables automatic index management `CREATE_INDEX` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1499
-
1500
1500
CREATE_INDEX = { DEFAULT | ON | OFF }
1501
-
DEFALT
1502
-
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1503
-
1504
-
ON
1501
+
DEFALT
1502
+
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1503
+
1504
+
ON
1505
1505
When enabled, missing indexes are automatically generated on a database. Following the index creation, gains to the performance of the workload are verified. When such created index no longer provides benefits to the workload performance, it is automatically reverted. Indexes automatically created are flagged as a system generated indexed.
1506
-
1507
-
OFF
1508
-
Does not automatically generate missing indexes on the database.
1509
-
1510
-
Enables or disables automatic index management `DROP_INDEX` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1511
-
1506
+
1507
+
OFF
1508
+
Does not automatically generate missing indexes on the database.
1509
+
1510
+
Enables or disables automatic index management `DROP_INDEX` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1511
+
1512
1512
DROP_INDEX = { DEFAULT | ON | OFF }
1513
-
DEFALT
1514
-
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1513
+
DEFALT
1514
+
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1515
1515
1516
-
ON
1517
-
Automatically drops duplicate or no longer useful indexes to the performance workload.
1516
+
ON
1517
+
Automatically drops duplicate or no longer useful indexes to the performance workload.
1518
+
1519
+
OFF
1520
+
Does not automatically drop missing inexes on the database.
1521
+
1522
+
Enables or disables automatic plan correction `FORCE_LAST_GOOD_PLAN` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1518
1523
1519
-
OFF
1520
-
Does not automatically drop missing inexes on the database.
1521
-
1522
-
Enables or disables automatic plan correction `FORCE_LAST_GOOD_PLAN` option of [automatic tuning](../../relational-databases/automatic-tuning/automatic-tuning.md).
1523
-
1524
1524
FORCE_LAST_GOOD_PLAN = { DEFAULT | ON | OFF }
1525
-
DEFAULT
1526
-
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1525
+
DEFAULT
1526
+
Inherits default settings from the server. In this case, options of enabling or disabling individual Automatic tuning features are defined at the server level.
1527
1527
1528
1528
ON
1529
1529
The [!INCLUDE[ssde_md](../../includes/ssde_md.md)] automatically forces the last known good plan on the [!INCLUDE[tsql_md](../../includes/tsql_md.md)] queries where new SQL plan causes performance regressions. The [!INCLUDE[ssde_md](../../includes/ssde_md.md)] continously monitors query performance of the [!INCLUDE[tsql_md](../../includes/tsql_md.md)] query with the forced plan. If there are performance gains, the [!INCLUDE[ssde_md](../../includes/ssde_md.md)] will keep using last known good plan. If performance gains are not detected, the [!INCLUDE[ssde_md](../../includes/ssde_md.md)] will produce a new SQL plan. The statement will fail if Query Store is not enabled or if it is not in *Read-Write* mode.
1530
1530
1531
1531
OFF
1532
-
The [!INCLUDE[ssde_md](../../includes/ssde_md.md)] reports potential query performance regressions caused by SQL plan changes in [sys.dm_db_tuning_recommendations](../../relational-databases/system-dynamic-management-views/sys-dm-db-tuning-recommendations-transact-sql.md) view. However, these recommendations are not automatically applied. User can monitor active recomendations and fix identified problems by applying [!INCLUDE[tsql_md](../../includes/tsql_md.md)] scripts that are shown in the view. This is the default value.
1533
-
1532
+
The [!INCLUDE[ssde_md](../../includes/ssde_md.md)] reports potential query performance regressions caused by SQL plan changes in [sys.dm_db_tuning_recommendations](../../relational-databases/system-dynamic-management-views/sys-dm-db-tuning-recommendations-transact-sql.md) view. However, these recommendations are not automatically applied. User can monitor active recomendations and fix identified problems by applying [!INCLUDE[tsql_md](../../includes/tsql_md.md)] scripts that are shown in the view. This is the default value.
1533
+
1534
1534
**\<change_tracking_option> ::=**
1535
1535
1536
1536
Controls change tracking options. You can enable change tracking, set options, change options, and disable change tracking. For examples, see the Examples section later in this article.
Modifies certain configuration options of a database.
36
36
37
-
Click one of the following tabs for the syntax, arguments, remarks, permissions, and examples for a particular SQL version with which you are working.
37
+
This article provides the syntax, arguments, remarks, permissions, and examples for whichever SQL product you choose.
38
38
39
39
For more information about the syntax conventions, see [Transact-SQL Syntax Conventions](../../t-sql/language-elements/transact-sql-syntax-conventions-transact-sql.md).
40
40
41
41
## Click a product!
42
42
43
-
In the following row, click whichever product name you are interested in. The click displays different content here, appropriate for whichever product you click:
43
+
In the following row, click whichever product name you are interested in. The click displays different content here on this webpage, appropriate for whichever product you click.
0 commit comments