Skip to content

polybase-network-encryption-server-configuration-option.md

Latest commit

 

History

History
86 lines (58 loc) · 2.45 KB

polybase-network-encryption-server-configuration-option.md

File metadata and controls

86 lines (58 loc) · 2.45 KB
title Server Configuration: PolyBase Network Encryption
description Set the configuration option for PolyBase network encryption in SQL Server settings.
author MikeRayMSFT
ms.author mikeray
ms.reviewer hudequei, randolphwest
ms.date 08/26/2025
ms.service sql
ms.subservice polybase
ms.topic conceptual

Server configuration: polybase network encryption

[!INCLUDE sql-pdw]

Display or changes the global configuration settings for PolyBase network encryption. This configuration option controls whether PolyBase encrypts the communication channels between the SQL Server instance and the PolyBase Engine, which runs in the same server.

The possible values are described in the following table:

Value Meaning
0 Disabled
1 (default) Enabled

Enabled is the default setting in SQL Server versions for security compliance.

When enabled, the communication between SQL Server and PolyBase components is encrypted.

When disabled:

  • Communication isn't encrypted
  • No certificate or extra checks are required.

Disabled encryption configuration can be suitable for environments that are fully trusted, isolated or when no certificate can be provided.

This change takes effect immediately.

Enable network encryption

The following example enables this setting.

EXECUTE sp_configure 'show advanced options', 1;
GO

RECONFIGURE;
GO

EXECUTE sp_configure 'polybase network encryption', 1;
GO

RECONFIGURE;
GO

Disable network encryption

The following example disables this setting.

EXECUTE sp_configure 'show advanced options', 1;
GO

RECONFIGURE;
GO

EXECUTE sp_configure 'polybase network encryption', 0;
GO

RECONFIGURE;
GO

Permissions

All users can execute sp_configure with no parameters or the @configname parameter.

Requires ALTER SETTINGS server-level permission or membership in the sysadmin fixed server role to change a configuration value or to run RECONFIGURE.

Related content