This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 24%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
I’m encountering an SSL certificate chain issue when trying to connect to my SQL Server from a Power BI server. The server connects, but when I click refresh, this error appears. Below are the details:
Error Message:
Microsoft SQL: A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.)
The error occurs even when connecting from the Power BI on the same SQL Server machine.
Environment:
Actions Taken:
I’ve exhausted my current options and would greatly appreciate any suggestions. Thank you!
Sounds like you've done everything right. But apparently you haven't after all.
Just to check, how does things look at the server? It should look like this:
That is, a name should appear in the certificate drop-down. It should not be blank.
Hi @Erland Sommarskog , thanks for your reply!
I typically don’t use an SSL certificate for SQL Server and it worked fine without SSL until recently when I encountered an issue. To resolve this, I created a new self-signed SSL certificate and added it to the server. For the certificate’s DNS name, I used the exact hostname of the server and added both the personal certificate and the trusted root certificate to the server.
Now, I can connect to Power BI without any issues on the same machine, using the hostname as the connection name, which matches the certificate's DNS name.
However, when I try to connect from outside the machine using the public IP address to SQL Server (on an AWS EC2 Windows server), I get the error: 'The server name provided doesn’t match the server name on the SQL Server SSL certificate.'
I’ve added the redirection in the hosts file (located at C:\Windows\System32\drivers\etc\hosts) on the client machine, mapping the SQL Server name to the IP address, but I got the same error. I even added the IP address as a DNS alias in the SSL certificate, but I still got the same error.
The server name provided doesn't match the server name on the SQL Server SSL certificate. Please see https://go.microsoft.com/fwlink/?LinkId=394782 or try connecting without encryption through the Data Source Settings dialog to continue. (Source at 99.99.99.99,1433\my_sqlsvr;salesdata.)
Yes, the name in the certificate must agree with the name you connect with. So if the certificate says MyMachine, and you connect with 10.1.2.3, it will fail.
However, there is a connection string option Host Name in Certificate to work around this situation. I don't know if it is exposed in PowerBI. To see an example, look at the connection dialog for SSMS 20 which exposes this option.
Hi @Suchith D，
Go to File->Options and Settings -> Data Source Settings in Power BI Desktop, select your SQL data source and tick "Encrypt connections".
Or go to other source, use OLEDB driver for a try.
Regards，
Zoe Hui
If the answer is helpful, please click "Accept Answer" and upvote it.
Hi @ZoeHui-MSFT , thanks for your reply!I have tried the steps you provided, but I got the same error. I'm not using encryption on the SQL side, so I have unticked 'Encrypt connections.' I added the self-signed SSL certificate to the SQL server and received some errors, which I mentioned in my previous comment. Can you please check?