无法将本地SQL Server连接至ADF:SSL证书信任问题求助
错误核心原因
报错信息明确指向:The certificate chain was issued by an authority that is not trusted,即自托管集成运行时(Self-hosted IR)所在服务器未信任本地SQL Server使用的SSL证书,导致连接建立后登录阶段证书验证失败。
具体解决方法
方法1:在IR服务器上导入信任SQL Server证书
- 从本地SQL Server导出其SSL证书的根CA证书(若为自签名证书,直接导出该证书)
- 在自托管IR运行的Windows服务器上,打开
mmc控制台,添加「证书」管理单元,选择「计算机账户」 - 导航至「受信任的根证书颁发机构」→「证书」,右键导入导出的证书,完成信任配置
方法2:临时禁用SSL证书验证(仅测试环境)
编辑Azure数据工厂(ADF)中的SQL Server链接服务,在连接配置里找到「SSL选项」,勾选「信任服务器证书」(对应连接字符串参数TrustServerCertificate=True)。注意:此方法会降低连接安全性,禁止生产环境使用。方法3:为SQL Server配置可信CA颁发的证书(生产环境推荐)
为本地SQL Server部署由公共可信CA或企业内部CA颁发的正规SSL证书,并确保自托管IR所在服务器已信任该CA,从根源解决证书信任问题,保障生产环境连接安全。
原始报错信息
Cannot connect to SQL Database. Please contact SQL server team for further support. Server: '', Database: '', User: ''. Check the linked service configuration is correct, and make sure the SQL Database firewall allows the integration runtime to access. A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.) The certificate chain was issued by an authority that is not trusted

内容的提问来源于stack exchange,提问作者Harinanth

