On-premises

Path: Security, privacy, and compliance > Security > On-premises · tier official · system none · narrative reviewed (checked by Opus)

Overview

This section collects the security guidance for Business Central on-premises deployments. The page “Security in Business Central (on-premises)” is the entry point. It outlines authentication methods, server hardening, client, database and network security, and the recommendation to use secure admin devices.

The other pages go into specific tasks. They cover SSL for the web client, security certificates between server and clients, hardening the server, encrypting data at rest, and granting SQL Server permissions for database management. Start with the overview page, then follow the page that matches the layer you are securing: connection, server, or database.

Key points

• Securing the web client with SSL means obtaining a certificate, adding an HTTPS binding, and optionally redirecting HTTP to HTTPS.
• X.509 security certificates can secure server-to-client connections over WAN, using chain trust or peer trust, with Server Authentication and Client Authentication certificates.
• Server hardening covers service account configuration, Microsoft Entra ID authentication, disk quotas, the client services port, data encryption and IPSec.
• Data at rest can be protected with Transparent Data Encryption and BitLocker, alone or combined as defense in depth, with a possible performance impact.
• Database management in SQL Server needs the dbcreator server role to create databases and the db_owner database role to manage companies and objects.
• The overview page mentions TLS 1.2 support and SQL Server security as part of the on-premises security picture.

Learn pages

• Configuring SSL to Secure the Web Client Connection: Learn how to secure data that is transmitted over the internet by enabling Secure Sockets Layer on the connection to Web Client.
• Data Encryption at Rest, Transparent Data Encryption, and BitLocker: Learn how to secure your data at rest using TDE and BitLocker on Business Central. Protect your SQL Server and Azure SQL Database files.
• Granting permissions to manage databases: Learn how to set database owner and security admin permissions in SQL Server for your Business Central solution.
• Hardening Business Central Server Security: Learn how you can harden security on the Business Central Server component to protect access to the configuration settings.
• Security in Business Central (on-premises): Learn about the main aspects of security in your on-premises deployment of Dynamics 365 Business Central.
• Using Security Certificates with Business Central on-premises: Learn how to use security certificates to help secure connections with Business Central.

Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.