Summary of security-related options
- Last Updated: April 8, 2026
- 1 minute read
- DataDirect Connectors
- ODBC
- Amazon Redshift 8.0
- Documentation
The following table summarizes how security-related connection options work with the driver. The connection options are listed alphabetically by the GUI name that appears on the driver Setup dialog box. The connection string attribute name is listed immediately after the GUI name in parentheses. See "Connection option descriptions" for details about configuring the options.
| Option | Description |
|---|---|
| Crypto Protocol Version (CryptoProtocolVersion) | Specifies the cryptographic protocols to use when SSL is enabled
using the Encryption Method connection option (EncryptionMethod=1 | 6). Default: TLSv1.2, TLSv1.3 |
| CryptoLibName (CryptoLibName) | The absolute path for the OpenSSL library file containing the
cryptographic library to be used by the data source or connection when SSL is enabled.
The cryptograpic library contains the implementations of cryptographic algorithms the
driver uses for data encryption. Default: Empty string |
| Enable FIPS | Determines whether the OpenSSL library uses cryptographic algorithms from the
FIPS provider or the default provider when TLS/SSL encryption is enabled
(Encryption Method=1).If disabled, the OpenSSL library uses cryptographic algorithms from the default provider. If enabled, the OpenSSL library uses cryptographic algorithms from the FIPS provider. Default: Disabled |
| Encryption Method (EncryptionMethod) | The method the driver uses to encrypt data sent between the
driver and the database server. If set to 0 (No Encryption), data is not encrypted. If set to 1 (SSL), data is encrypted using the SSL protocols specified in the Crypto Protocol Version connection option. If set to 6 (RequestSSL), the login request and data are encrypted using SSL if the server is configured for SSL. If the server is not configured for SSL, an unencrypted connection is established. Default: 0 (No Encryption) |
| Host Name In Certificate (HostNameInCertificate) | A host name for certificate validation when SSL
encryption is enabled (Encryption Method=1 |
6) and validation is enabled (Validate Server Certificate=1). Default: None |
| Key Password (KeyPassword) | Specifies the password used to access the individual
keys in the keystore file when SSL is enabled (Encryption
Method=1 | 6) and SSL client
authentication is enabled on the database server. Default: None |
| Key Store (Keystore) | The name of the directory containing the keystore
file to be used when SSL is enabled (EncryptionMethod=1 | 6) and SSL
client authentication is enabled on the database server. Default: None |
| Key Store Password (KeystorePassword) | The password used to access the keystore file when
SSL is enabled (Encryption Method=1 |
6) and SSL client authentication is enabled
on the database server. Default: None |
| SSLLibName (SSLLibName) | The absolute path for the OpenSSL library file containing the SSL
library to be used by the data source or connection when SSL is enabled. The SSL
library contains the implementations of SSL protocols the driver uses for data
encryption. Default: Empty string |
| Trust Store (Truststore) | The directory that contains the truststore file and
the truststore file name to be used when SSL is enabled (EncryptionMethod=1 | 6) and
server authentication is used. Default: None |
| Trust Store Password (TruststorePassword) | Specifies the password that is used to access the
truststore file when SSL is enabled (EncryptionMethod=1 | 6) and
server authentication is used. Default: None |
| User Name (LogonID) | The default user ID used to connect to your database. |
| Validate Server Certificate (ValidateServerCertificate) | If enabled, the driver validates the certificate that
is sent by the database server. Any certificate from the server must be issued by a
trusted CA in the truststore file. If the Host Name In Certificate option is
specified, the driver also validates the certificate using a host name. Default: Enabled |