{"id":7557,"date":"2026-08-19T18:24:46","date_gmt":"2026-08-19T23:24:46","guid":{"rendered":"https:\/\/andreas-wolter.com\/?p=7557"},"modified":"2026-08-19T18:24:46","modified_gmt":"2026-08-19T23:24:46","slug":"2026_sqlserverdatabaseapplicationsecurityandhighavailabilitychecklist_v3","status":"publish","type":"post","link":"https:\/\/andreas-wolter.com\/en\/2026_sqlserverdatabaseapplicationsecurityandhighavailabilitychecklist_v3\/","title":{"rendered":"Updated SQL Server Database Application Security &#038; HA Checklist &#8211; Version 3 available"},"content":{"rendered":"\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-m0cxh8ps-570f8e299fec3f093988647373b6f6f1\">\n#top .av-special-heading.av-m0cxh8ps-570f8e299fec3f093988647373b6f6f1{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-m0cxh8ps-570f8e299fec3f093988647373b6f6f1 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-m0cxh8ps-570f8e299fec3f093988647373b6f6f1 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-m0cxh8ps-570f8e299fec3f093988647373b6f6f1 av-special-heading-h3 blockquote modern-quote  avia-builder-el-0  el_before_av_textblock  avia-builder-el-first '><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >Updated SQL Server Database Application Security <span class='special_amp'>&amp;<\/span> HA Checklist &#8211; Version 3 available<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div>\r\n\r\n<section  class='av_textblock_section av-m0cxgkjy-c935304b4106b45214698f40e83a9894 '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-7558\" src=\"https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-1030x392.png\" alt=\"\" width=\"1030\" height=\"392\" srcset=\"https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-1030x392.png 1030w, https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-300x114.png 300w, https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-768x292.png 768w, https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-705x268.png 705w, https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist-845x321.png 845w, https:\/\/andreas-wolter.com\/wp-content\/uploads\/2026\/08\/2026_08_SQL_Server_Database_Application_Security_and_HA_Checklist.png 1065w\" sizes=\"auto, (max-width: 1030px) 100vw, 1030px\" \/><\/p>\n<p>I have updated the <strong>SQL Server Database Application Security &#038; High Availability Checklist<\/strong> and moved the current version to the Sarpedon Quality Lab website:\u00a0<a href=\"https:\/\/sarpedonqualitylab.us\/resources\/database-application-vendor-sql-server-security-high-availability-checklist\/\" target=\"_blank\" rel=\"noopener\">View here<\/a><\/p>\n<p>The checklist is written for two audiences:<\/p>\n<p>Database application vendors who want their SQL Server-backed products to be easier to approve in enterprise environments.<\/p>\n<p>DBAs, security administrators, and architects who need to evaluate whether a vendor application can be deployed securely.<\/p>\n<h2>What changed in Version 3<\/h2>\n<h3>Deployment Security<\/h3>\n<p>Version 3 strengthens the deployment guidance around least privilege and customer-controlled setup. It adds advice for using Managed Identities and Entra ID authentication, avoiding ##MS_DatabaseManager## and secure credential handling.<\/p>\n<h3>Operational Security<\/h3>\n<p>Adds guidance for minimizing msdb access, and supporting TLS 1.2 with modern SQL Server drivers.<\/p>\n<h3>High Availability and Business Continuity<\/h3>\n<p>The HA section expands the guidance around DNS aliases and Availability Group listeners and certificate validation through aliases and listeners. The goal is to make applications safer during failover, migration, patching, and recovery.<\/p>\n<p>The updated version is available here: <a href=\"https:\/\/sarpedonqualitylab.us\/resources\/the-database-application-vendor-sql-server-security-high-availability-checklist\/\" target=\"_blank\" rel=\"noopener\">The Database Application Vendor\u2019s SQL Server Security &#038; High Availability Checklist<\/a><\/p>\n<p>Build securely. Deploy safely.<\/p>\n<p>Andreas<\/p>\n<\/div><\/section>\r\n\r\n<div  class='flex_column av-8snbva-1c2d2244f1c43d69d37a0e06977166db av_one_full  avia-builder-el-2  el_after_av_textblock  el_before_av_social_share  first flex_column_div  column-top-margin'     ><div  class='hr av-7u2orq-7e04d3a7f9cf83bdd3d93e3711b8b2e1 hr-default  avia-builder-el-3  el_before_av_textblock  avia-builder-el-first '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div>\n<section  class='av_textblock_section av-5fi9eu-6d2288e0394a02fb2fad99e60d604459 '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>Need help making a SQL Server-backed application secure and enterprise-ready?<\/p>\n<\/div><\/section>\n<div  class='avia-button-wrap av-3hh98m-36c01e75181016bf4a08eb8ae5d22c91-wrap avia-button-center  avia-builder-el-5  el_after_av_textblock  el_before_av_hr '>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-3hh98m-36c01e75181016bf4a08eb8ae5d22c91\">\n#top #wrap_all .avia-button.av-3hh98m-36c01e75181016bf4a08eb8ae5d22c91{\nfont-size:14px;\nbackground-color:#75a823;\nborder-color:#75a823;\ncolor:#ffffff;\nbox-shadow: 0 0 5px 5px ;\ntransition:all 0.4s ease-in-out;\n}\n<\/style>\n<a href=\"https:\/\/sarpedonqualitylab.us\/sql-server-security-assessment\/\" class=\"avia-button av-3hh98m-36c01e75181016bf4a08eb8ae5d22c91 avia-icon_select-yes-left-icon avia-size-medium avia-position-center\" target=\"_blank\" rel=\"noopener\"><span class='avia_button_icon avia_button_icon_left' aria-hidden='true' data-av_icon='\ue832' data-av_iconfont='entypo-fontello'><\/span><span class='avia_iconbox_title' >Explore Sarpedon Quality Lab Security Assessments<\/span><\/a><\/div>\n<div  class='hr av-akt7a-a44f115482ba6fb3feca0b7a1ebaa4d4 hr-default  avia-builder-el-6  el_after_av_button  avia-builder-el-last '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><\/div><div  class='av-social-sharing-box av-5n5vpa-78ffdd9d224b4a246af65bdc00dce900 av-social-sharing-box-default  avia-builder-el-7  el_after_av_one_full  el_before_av_hr  av-social-sharing-box-fullwidth'><div class=\"av-share-box\"><h5 class='av-share-link-description av-no-toc '>Share article<\/h5><ul class=\"av-share-box-list noLightbox\"><li class='av-share-link av-social-link-facebook' ><a target=\"_blank\" aria-label=\"Share on Facebook\" href=\"https:\/\/www.facebook.com\/sharer.php?u=https:\/\/andreas-wolter.com\/en\/2026_sqlserverdatabaseapplicationsecurityandhighavailabilitychecklist_v3\/&amp;t=Updated%20SQL%20Server%20Database%20Application%20Security%20%26%20HA%20Checklist%20%E2%80%93%20Version%203%20available\" aria-hidden=\"false\" data-av_icon=\"\ue8f3\" data-av_iconfont=\"entypo-fontello\" title=\"\" data-avia-related-tooltip=\"Share on Facebook\" rel=\"noopener\"><span class='avia_hidden_link_text'>Share on Facebook<\/span><\/a><\/li><li class='av-share-link av-social-link-twitter' ><a target=\"_blank\" aria-label=\"Share on Twitter\" href=\"https:\/\/twitter.com\/share?text=Updated%20SQL%20Server%20Database%20Application%20Security%20%26%20HA%20Checklist%20%E2%80%93%20Version%203%20available&amp;url=https:\/\/andreas-wolter.com\/en\/?p=7557\" aria-hidden=\"false\" data-av_icon=\"\ue8f1\" data-av_iconfont=\"entypo-fontello\" title=\"\" data-avia-related-tooltip=\"Share on Twitter\" rel=\"noopener\"><span class='avia_hidden_link_text'>Share on Twitter<\/span><\/a><\/li><li class='av-share-link av-social-link-linkedin' ><a target=\"_blank\" aria-label=\"Share on LinkedIn\" href=\"https:\/\/linkedin.com\/shareArticle?mini=true&amp;title=Updated%20SQL%20Server%20Database%20Application%20Security%20%26%20HA%20Checklist%20%E2%80%93%20Version%203%20available&amp;url=https:\/\/andreas-wolter.com\/en\/2026_sqlserverdatabaseapplicationsecurityandhighavailabilitychecklist_v3\/\" aria-hidden=\"false\" data-av_icon=\"\ue8fc\" data-av_iconfont=\"entypo-fontello\" title=\"\" data-avia-related-tooltip=\"Share on LinkedIn\" rel=\"noopener\"><span class='avia_hidden_link_text'>Share on LinkedIn<\/span><\/a><\/li><\/ul><\/div><\/div>\r\n\r\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-4ofg9q-c2108540b480aba02923089240a3a176\">\n#top .hr.hr-invisible.av-4ofg9q-c2108540b480aba02923089240a3a176{\nheight:50px;\n}\n<\/style>\n<div  class='hr av-4ofg9q-c2108540b480aba02923089240a3a176 hr-invisible  avia-builder-el-8  el_after_av_social_share  el_before_av_comments_list '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div>\r\n\r\n<div  class='av-buildercomment av-284ftq-f5a1564cd6b8ffad6ce835e2d40de4b7  av-blog-meta-author-disabled av-blog-meta-html-info-disabled'><\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":7127,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57],"tags":[206],"class_list":["post-7557","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-en","tag-sql-security"],"_links":{"self":[{"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/posts\/7557","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/comments?post=7557"}],"version-history":[{"count":2,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/posts\/7557\/revisions"}],"predecessor-version":[{"id":7561,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/posts\/7557\/revisions\/7561"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/media\/7127"}],"wp:attachment":[{"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/media?parent=7557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/categories?post=7557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/andreas-wolter.com\/en\/wp-json\/wp\/v2\/tags?post=7557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}