You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: "Common Criteria Compliance Enabled Configuration | Microsoft Docs"
3
-
description: Learn which criteria the common criteria compliance option enables in SQL Server, and see how to comply with Common Criteria Evaluation Assurance Level 4+.
4
-
ms.custom: ""
5
-
ms.date: "08/21/2018"
2
+
title: Common Criteria Compliance Enabled Configuration
3
+
description: Learn which criteria the common criteria compliance option enables in SQL Server. See how to comply with Common Criteria Evaluation Assurance Level. For EUCC certification approval. A world-wide compliance obligation across regulated industries and authorities.
6
4
ms.prod: sql
7
5
ms.prod_service: high-availability
8
-
ms.reviewer: ""
9
6
ms.technology: configuration
10
7
ms.topic: conceptual
11
8
f1_keywords:
@@ -15,47 +12,53 @@ helpviewer_keywords:
15
12
- "common criteria compliance [Database Engine]"
16
13
- "Risidual Information Protection [Database Engine]"
17
14
- "RIP (Residual Information Protection)"
18
-
ms.assetid: 61766eea-c450-408d-af33-fbe7ef8c9ff2
19
-
author: rothja
20
-
ms.author: jroth
15
+
author: markingmyname
16
+
ms.author: maghan
17
+
ms.reviewer: wopeter
18
+
ms.custom: ""
19
+
ms.date: 04/07/2021
21
20
---
21
+
22
22
# Common Criteria Compliance Enabled Server Configuration
The common criteria compliance option enables the following elements that are required for the [Common Criteria for Information Technology Security Evaluation](https://www.commoncriteriaportal.org/).
26
-
27
-
|Criteria|Description|
28
-
|--------------|-----------------|
29
-
|Residual Information Protection (RIP)|RIP requires a memory allocation to be overwritten with a known pattern of bits before memory is reallocated to a new resource. Meeting the RIP standard can contribute to improved security; however, overwriting the memory allocation can slow performance. After the common criteria compliance enabled option is enabled, the overwriting occurs.|
30
-
|The ability to view login statistics|After the common criteria compliance enabled option is enabled, login auditing is enabled. Each time a user successfully logs in to [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)], information about the last successful login time, the last unsuccessful login time, and the number of attempts between the last successful and current login times is made available on a per-session basis. These login statistics can be viewed by querying the [sys.dm_exec_sessions](../../relational-databases/system-dynamic-management-views/sys-dm-exec-sessions-transact-sql.md) dynamic management view.|
31
-
|That column `GRANT` should not override table `DENY`|After the common criteria compliance enabled option is enabled, a table-level `DENY` takes precedence over a column-level `GRANT`. When the option is not enabled, a column-level `GRANT` takes precedence over a table-level `DENY`.|
32
-
33
-
The common criteria compliance enabled option is an advanced option. Common criteria is only evaluated and certified for the Enterprise edition and Datacenter edition. For the latest status of common criteria certification, see the [Microsoft SQL Server Common Criteria](https://go.microsoft.com/fwlink/?LinkId=616319) Web site.
34
-
35
-
> [!IMPORTANT]
36
-
> In addition to enabling the common criteria compliance enabled option, you also must download and run a script that finishes configuring [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] to comply with Common Criteria Evaluation Assurance Level 4+ (EAL4+). You can download this script from the [Microsoft SQL Server Common Criteria](https://go.microsoft.com/fwlink/?LinkId=616319) Web site.
37
-
38
-
If you are using the `sp_configure` system stored procedure to change the setting, you can change common criteria compliance enabled only when show advanced options is set to 1. The setting takes effect after the server is restarted. The possible values are 0 and 1:
39
-
40
-
- 0 indicates that common criteria compliance is not enabled. This is the default.
41
-
42
-
- 1 indicates that common criteria compliance is enabled.
43
-
44
-
## Examples
45
-
The following example enables common criteria compliance.
The common criteria compliance option enables the following elements that are required for the [Common Criteria for Information Technology Security Evaluation](https://www.commoncriteriaportal.org). A requirement for a world-wide compliance obligation across regulated industries and authorities.
27
+
28
+
| Criteria | Description |
29
+
|----------|-------------|
30
+
| Residual Information Protection (RIP) | RIP requires a memory allocation to be overwritten with a known pattern of bits before memory is reallocated to a new resource. Meeting the RIP standard can contribute to improved security; however, overwriting the memory allocation can slow performance. After the common criteria compliance enabled option is enabled, the overwriting occurs. |
31
+
|The ability to view login statistics | Login auditing is enabled after the common criteria compliance option is enabled. </br></br></br> Login times that are made available on a per-session basis each time a user successfully logs in to SQL Server: </br> - Information about the last successful login time </br> - The last unsuccessful login time </br> - The number of attempts between the last successful login and the current login. </br></br></br> These login statistics can be viewed by querying the [sys.dm_exec_sessions](../../relational-databases/system-dynamic-management-views/sys-dm-exec-sessions-transact-sql.md) dynamic management view. |
32
+
|That column `GRANT` shouldn't override table `DENY`| After the common criteria compliance enabled option is enabled, a table-level `DENY` takes precedence over a column-level `GRANT`. When the option isn't enabled, a column-level `GRANT` takes precedence over a table-level `DENY`. |
33
+
34
+
The common criteria compliance enabled option is an advanced option. Common criteria is only evaluated and certified for the Enterprise edition and Datacenter edition. For the latest status of common criteria certification, see the [Microsoft SQL Server Common Criteria](https://go.microsoft.com/fwlink/?LinkId=616319) site.
35
+
36
+
> [!IMPORTANT]
37
+
> In addition to enabling the common criteria compliance enabled option, you also must download and run a script that finishes configuring SQL Server to comply with Common Criteria Evaluation Assurance Level 4+ (EAL4+). You can download this script from the [Microsoft SQL Server Common Criteria](https://go.microsoft.com/fwlink/?LinkId=616319) site.
38
+
39
+
If you're using the `sp_configure` system stored procedure to change the setting, you can change common criteria compliance enabled only when show advanced options is set to 1. The setting takes effect after the server is restarted. The possible values are 0 and 1:
40
+
41
+
- 0 indicates that common criteria compliance isn't enabled (default).
42
+
43
+
- 1 indicates that common criteria compliance is enabled.
44
+
45
+
## Examples
46
+
47
+
The following example enables common criteria compliance.
Copy file name to clipboardExpand all lines: docs/machine-learning/deploy/modify-r-python-code-to-run-in-sql-server.md
+1-2Lines changed: 1 addition & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -80,8 +80,7 @@ How much you change your code depends on whether you intend to submit the code f
80
80
,@script = N'R code here'
81
81
```
82
82
83
-
+ Any variables that you pass in as parameters of the stored procedure [sp_execute_external_script](../../relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql.md) must be mapped to variables in the code. By default, variables are mapped by name.
84
-
All columns in the input dataset must also be mapped to variables in the script.
83
+
+ Any variables that you pass in as parameters of the stored procedure [sp_execute_external_script](../../relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql.md) must be mapped to variables in the code. By default, variables are mapped by name. All columns in the input dataset must also be mapped to variables in the script.
85
84
86
85
For example, assume your R script contains a formula like this one:
Copy file name to clipboardExpand all lines: docs/machine-learning/install/custom-runtime-r.md
+6-2Lines changed: 6 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Install R custom runtime
3
3
description: Learn how to install an R custom runtime for SQL Server using Language Extensions. The Python custom runtime can run machine learning scripts.
4
4
ms.prod: sql
5
5
ms.technology: machine-learning-services
6
-
ms.date: 03/16/2021
6
+
ms.date: 04/07/2021
7
7
ms.topic: how-to
8
8
author: dphansen
9
9
ms.author: davidph
@@ -56,7 +56,7 @@ Use your own version of the R runtime with SQL Server, instead of the default ru
56
56
57
57
## Enable external script
58
58
59
-
You can execute a Python external script with the stored procedure [sp_execute_external script](../../relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql.md).
59
+
You can execute an R external script with the stored procedure [sp_execute_external script](../../relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql.md).
60
60
61
61
To enable external scripts, use [Azure Data Studio](../../azure-data-studio/what-is-azure-data-studio.md) to execute the statement below.
62
62
@@ -79,6 +79,10 @@ print(R.version);
79
79
print("Hello RExtension!");'
80
80
```
81
81
82
+
::: zone pivot="platform-windows"
83
+
[!INCLUDE [R custom runtime - Windows - known issues](includes/custom-runtime-r-windows-known-issues.md)]
84
+
::: zone-end
85
+
82
86
::: zone pivot="platform-linux-rhel"
83
87
[!INCLUDE [R custom runtime - Linux - RHEL known issues](includes/custom-runtime-r-linux-known-issues-rhel.md)]
If you're using the R runtime provided as part of [SQL Server Machine Learning Services](../../sql-server-machine-learning-services.md) by setting `R_HOME` to `C:\Program Files\Microsoft SQL Server\MSSQL15.<INSTANCE_NAME>\R_SERVICES` when you register the language extension, you might run into the following error upon executing any external custom R script with [sp_execute_external script](../../../relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql.md).
13
+
14
+
*Error: cons memory exhausted (limit reached?)*
15
+
16
+
To resolve this issue:
17
+
1. Set the environment variable `R_NSIZE` indicating the number of fixed sized objects (`cons cells`) to a reasonable value, for example, `200000`.
18
+
1. Restart the **Launchpad** service and retry the execution of the script.
Copy file name to clipboardExpand all lines: docs/machine-learning/install/includes/custom-runtime-r-windows.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
ms.prod: sql
3
3
ms.technology: machine-learning-services
4
-
ms.date: 02/08/2021
4
+
ms.date: 04/07/2021
5
5
ms.topic: include
6
6
author: dphansen
7
7
ms.author: davidph
@@ -87,7 +87,7 @@ Follow these steps to install the **Rcpp** package.
87
87
1. Run the following script to install the Rcpp package in the `\library` folder in your R installation path. For example, `C:\Program Files\R\R-4.0.3\library`.
Copy file name to clipboardExpand all lines: docs/reporting-services/reporting-services-features-supported-by-the-editions-of-sql-server-2016.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,7 @@ For features supported by the Evaluation and Developer editions, see the SQL Ser
68
68
> SQL Server Express with Tools and SQL Server Express don't support SQL Server Reporting Services.
69
69
70
70
## Edition requirements for the report server database
71
-
When you create a report server database, not all editions of SQL Server [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] can be used to host the database. The following table shows you which editions of the [!INCLUDE[ssDE](../includes/ssde-md.md)] you can use for specific editions of SQL Server [!INCLUDE[ssRSnoversion](../includes/ssrsnoversion-md.md)].
71
+
When you create a report server database, not all editions of [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] can be used to host the database. The following table shows you which editions of the [!INCLUDE[ssDE](../includes/ssde-md.md)] you can use for specific editions of SQL Server [!INCLUDE[ssRSnoversion](../includes/ssrsnoversion-md.md)].
72
72
73
73
|For this edition of [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] Reporting Services,|Use this edition of the Database Engine instance to host the database.|
Copy file name to clipboardExpand all lines: docs/sql-server/install/configure-the-windows-firewall-to-allow-sql-server-access.md
+11-1Lines changed: 11 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: "Configure Windows Firewall"
3
3
description: Learn how to configure the Windows firewall to allow access to an instance of the SQL Server through the firewall.
4
4
ms.custom: "contperf-fy21q3"
5
-
ms.date: 03/26/2021
5
+
ms.date: 04/07/2021
6
6
ms.prod: sql
7
7
ms.reviewer: ""
8
8
ms.technology: install
@@ -92,6 +92,16 @@ Configure the Windows Firewall settings with either **Microsoft Management Conso
92
92
- [Netsh Command Syntax, Contexts, and Formatting](/windows-server/networking/technologies/netsh/netsh-contexts)
93
93
- [How to use the "netsh advfirewall firewall" context instead of the "netsh firewall" context to control Windows Firewall behavior in Windows Server 2008 and in Windows Vista](https://support.microsoft.com/kb/947709)
94
94
95
+
- **PowerShell**
96
+
97
+
See the following example to open TCP port 1433 and UDP port 1434 for SQL Server default instance, and SQL Server Browser Service:
For more examples, see [New-NetFirewallRule](/powershell/module/netsecurity/new-netfirewallrule).
95
105
96
106
- **For Linux**: On Linux, you also need to open the ports associated with the services you need access to. Different distributions of Linux and different firewalls have their own procedures. For two examples, see [SQL Server on Red Hat](../../linux/quickstart-install-connect-red-hat.md), and [SQL Server on SUSE](../../linux/quickstart-install-connect-suse.md).
0 commit comments