Updated SQL Server Database Application Security & HA Checklist – Version 3 available

I have updated the SQL Server Database Application Security & High Availability Checklist and moved the current version to the Sarpedon Quality Lab website: View here

The checklist is written for two audiences:

Database application vendors who want their SQL Server-backed products to be easier to approve in enterprise environments.

DBAs, security administrators, and architects who need to evaluate whether a vendor application can be deployed securely.

What changed in Version 3

Deployment Security

Version 3 strengthens the deployment guidance around least privilege and customer-controlled setup. It adds advice for using Managed Identities and Entra ID authentication, avoiding ##MS_DatabaseManager## and secure credential handling.

Operational Security

Adds guidance for minimizing msdb access, and supporting TLS 1.2 with modern SQL Server drivers.

High Availability and Business Continuity

The HA section expands the guidance around DNS aliases and Availability Group listeners and certificate validation through aliases and listeners. The goal is to make applications safer during failover, migration, patching, and recovery.

The updated version is available here: The Database Application Vendor’s SQL Server Security & High Availability Checklist

Build securely. Deploy safely.

Andreas