Security and Authentication

To protect data from unauthorized access, some MySQL data stores require connections to be authenticated with user credentials or encrypted using the SSL protocol. The Simba MySQL ODBC Driver provides full support for these authentication protocols.

Note:

In this documentation, "SSL" refers to both TLS (Transport Layer Security) and SSL (Secure Sockets Layer). The connector supports . The SSL version used for the connection is the highest version that is supported by both the connector and the server.

Note:

In this documentation, "SSL" refers to both TLS (Transport Layer Security) and SSL (Secure Sockets Layer). The SSL version used for the connection is the highest version that is supported by both the connector and the server.

By default, the connector supports TLS 1.0, 1.1, and 1.2. You can configure the connector to use a specific TLS version. For more information, see Configuring SSL ConnectionsConfiguring SSL Connections.

The connector provides a mechanism that enables you to authenticate your connection using the caching_sha2_password, SHA-256, or Windows native authentication plugins. The settings in the MySQL server determine which plugin is used and what credentials you need to provide. The default plugin is caching_sha2_password. For detailed connector configuration instructions, see Creating a Data Source NameCreating a Data Source Name.

Additionally, the connector supports the following types of SSL connections:

  • No identity verification
  • One-way authentication
  • Two-way authentication

It is recommended that you enable SSL whenever you connect to a server that is configured to support it. SSL encryption protects data and credentials when they are transferred over the network, and provides stronger security than authentication alone. For detailed configuration instructions, see Configuring SSL ConnectionsConfiguring SSL Connections.