diff --git a/README.md b/README.md
index c426cfe..2b56f93 100644
--- a/README.md
+++ b/README.md
@@ -124,23 +124,41 @@ one for each table to copy, plus the one for the job)
 
 You'll also need to specify the connection parameters. They will be stored inside the kettle files (in
 cleartext, so don't make this directory public):
+
 `-sd` : sql server database
+
 `-sh` : sql server host
+
 `-si` : sql server host instance
+
 `-sp` : sql server port (usually 1433)
+
 `-su` : sql server username
+
 `-sw` : sql server password
+
 `-pd` : postgresql database
+
 `-ph` : postgresql host
+
 `-pp` : postgresql port
+
 `-pu` : postgresql username
+
 `-pw` : postgresql password
+
+`-sforce_ssl` : force a SSL connection to your SQL Server database. Required if ForceEncryption option is set to 'Yes'
+
 `-pforce_ssl` : force a SSL connection to your PostgreSQL database. ssl=on should be set on the PostgreSQL server
+
 `-f`  : the SQL Server structure dump file
--ignore_errors : ignore insert errors (not advised, you'll need to examine kettle's logs, and it will be slower)
+
+`-ignore_errors` : ignore insert errors (not advised, you'll need to examine kettle's logs, and it will be slower)
 
 `-pi`  : The parallelism used in kettle jobs to read from SQL Server (1 by default, the jdbc driver frequently errors out when larger)
+
 `-po`  : The parallelism used in kettle jobs to write to PostgresSQL: there will be this amount of sessions used to insert into PostgreSQL. Default to 8
+
 `-sort_size=100000`: sort size to use for incremental jobs. Default is 10000, to try to be on the safe side (see below).
 
 We don't sort in databases for two reasons: the sort order (collation for strings for example) can be different between SQL Server
diff --git a/sqlserver2pgsql.pl b/sqlserver2pgsql.pl
index 2f0a672..a25144d 100755
--- a/sqlserver2pgsql.pl
+++ b/sqlserver2pgsql.pl
@@ -53,6 +53,7 @@
 our $parallelism_out;
 our $sort_size;
 our $use_pk_if_possible;
+our $sforce_ssl;
 our $pforce_ssl;
 our $stringtype_unspecified;
 our $skip_citext_length_check;
@@ -114,6 +115,7 @@ sub parse_conf_file
       'sort size'                => 'sort_size',
       'use pk if possible'       => 'use_pk_if_possible',
       'ignore errors'            => 'ignore_errors',
+      'sql server force ssl'     => 'sforce_ssl',
       'postgresql force ssl'     => 'pforce_ssl',
       'stringtype unspecified'   => 'stringtype_unspecified',
       'skip citext length check' => 'skip_citext_length_check',
@@ -168,6 +170,7 @@ sub set_default_conf_values
     $ignore_errors=0 unless (defined ($ignore_errors));
     $pp=5432 unless (defined ($pp));                         # Default port for PostgreSQL
     $sp=1433 unless (defined ($sp));                         # Default port for SQL-Server
+    $sforce_ssl=0 unless (defined ($sforce_ssl));
     $pforce_ssl=0 unless (defined ($pforce_ssl));
     $stringtype_unspecified=0 unless (defined ($stringtype_unspecified));
     $skip_citext_length_check=0 unless (defined ($skip_citext_length_check));
@@ -894,6 +897,8 @@ sub usage
             parallelism level for the kettle job (input, SQL Server). Default 1.
     -po PARALLELISM_OUT
             parallelism level for the kettle job (output, PostgreSQL). Default 8.
+    -sforce_ssl
+            force a SSL session to SQL Server
     -pforce_ssl
             force a SSL session to PostgreSQL
     -stringtype_unspecified
@@ -1029,6 +1034,14 @@ sub generate_kettle
                 $newtemplate =~ s/<use_batch>Y<\/use_batch>/<use_batch>N<\/use_batch>/g; # Cannot use batch mode with ignore errors
             }
 
+            if ($sforce_ssl)
+            {
+                    $newtemplate =~ s/__sforce_ssl__/<attribute><code>EXTRA_OPTION_MSSQL.ssl<\/code><attribute>require<\/attribute><\/attribute>/g;
+            }
+            else
+            {
+                    $newtemplate =~ s/__sforce_ssl__//g;
+            }
             if ($pforce_ssl)
             {
                     $newtemplate =~ s/__pforce_ssl__/<attribute><code>EXTRA_OPTION_POSTGRESQL.ssl<\/code><attribute>true<\/attribute><\/attribute>\n<attribute><code>EXTRA_OPTION_POSTGRESQL.sslfactory<\/code><attribute>org.postgresql.ssl.NonValidatingFactory<\/attribute><\/attribute>/g;
@@ -1066,6 +1079,14 @@ sub generate_kettle
             $newincrementaltemplate =~ s/__PARALLELISM_OUT__/$parallelism_out/g;
             $newincrementaltemplate =~ s/__sort_size__/$sort_size/g;
 
+            if ($sforce_ssl)
+            {
+                    $newincrementaltemplate =~ s/__sforce_ssl__/<attribute><code>EXTRA_OPTION_MSSQL.ssl<\/code><attribute>require<\/attribute><\/attribute>/g;
+            }
+            else
+            {
+                    $newincrementaltemplate =~ s/__sforce_ssl__//g;
+            }
             if ($pforce_ssl)
             {
                     $newincrementaltemplate =~ s/__pforce_ssl__/<attribute><code>EXTRA_OPTION_POSTGRESQL.ssl<\/code><attribute>true<\/attribute><\/attribute>\n<attribute><code>EXTRA_OPTION_POSTGRESQL.sslfactory<\/code><attribute>org.postgresql.ssl.NonValidatingFactory<\/attribute><\/attribute>/g;
@@ -3283,6 +3304,7 @@ sub resolve_name_conflicts
 	 "sort_size=i"              => \$sort_size,
 	 "use_pk_if_possible=s"     => \$use_pk_if_possible,
 	 "ignore_errors"            => \$ignore_errors,
+	 "sforce_ssl"	            => \$sforce_ssl,
 	 "pforce_ssl"	            => \$pforce_ssl,
 	 "stringtype_unspecified"   => \$stringtype_unspecified,
 	 "skip_citext_length_check" => \$skip_citext_length_check,
@@ -3420,6 +3442,7 @@ BEGIN
     <data_tablespace/>
     <index_tablespace/>
     <attributes>
+      __sforce_ssl__
       <attribute><code>EXTRA_OPTION_MSSQL.instance</code><attribute>__sqlserver_instance__</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_LOWERCASE</code><attribute>N</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_UPPERCASE</code><attribute>N</attribute></attribute>
@@ -3782,6 +3805,7 @@ BEGIN
     <data_tablespace/>
     <index_tablespace/>
     <attributes>
+      __sforce_ssl__
       <attribute><code>EXTRA_OPTION_MSSQL.instance</code><attribute>__sqlserver_instance__</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_LOWERCASE</code><attribute>N</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_UPPERCASE</code><attribute>N</attribute></attribute>
@@ -4351,6 +4375,7 @@ BEGIN
     <data_tablespace/>
     <index_tablespace/>
     <attributes>
+      __sforce_ssl__
       <attribute><code>EXTRA_OPTION_MSSQL.instance</code><attribute>__sqlserver_instance__</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_LOWERCASE</code><attribute>N</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_UPPERCASE</code><attribute>N</attribute></attribute>
@@ -4781,6 +4806,7 @@ BEGIN
     <data_tablespace/>
     <index_tablespace/>
     <attributes>
+      __sforce_ssl__
       <attribute><code>EXTRA_OPTION_MSSQL.instance</code><attribute>__sqlserver_instance__</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_LOWERCASE</code><attribute>N</attribute></attribute>
       <attribute><code>FORCE_IDENTIFIERS_TO_UPPERCASE</code><attribute>N</attribute></attribute>