Bgrenon/5

1. Configure Microsoft SQL Server as described in the related database guides.
2. Set the level of TLS control on the DAP.
   • In the GAX section of the DAP, create an option that is named tls_mode.
   • Specify one of the following values for the tls_mode option:
     • off—Do not use TLS.
     • request—If the server supports TLS, it is used.
     • required—If the server does not support TLS, the connection is revoked.
     • authentication—GAX validates the server-send certificate against the local trust store.
     • <option not set>—Same as off.
3. Verify that the configured port is identical to the TLS listener port of Microsoft SQL Server
4. Due to an incompatibility between newer versions of Java and the Microsoft SQL Server driver, disable CBC Protection to enable GAX to connect to a Microsoft SQL Server database.
   • For Windows, add the following line to the setenv.bat file:

     set JAVA_OPTS=%JAVA_OPTS% -Djsse.enableCBCProtection=false

   • For Linux, add the following line to the setenv.sh file:

     JAVA_OPTS="$JAVA_OPTS -Djsse.enableCBCProtection=false"