Sold by: Detent Point LLC
SQL Server Certificate Management v2.0: TDE, Encryption, Backup, AOAG, PBIRS, Renewal, 40 PowerShell Commands + MCP
Overview
SqlCertForge v2.0 is a complete SQL Server certificate management platform: issue, bind, verify, rotate, backup, restore, and automate certificates end to end.
CORE FEATURES
- TLS certificates for SQL Server and Reporting Services instances
- TDE server-certificate lifecycle (create/rotate/backup/restore)
- Backup-encryption readiness (per-backup-file restorability checks)
- Always Encrypted and cell-level encryption key management
- Database-mirroring and AG endpoint certificate authentication
- Automated renewal job scheduling with verification
- Cross-server certificate migration
- Estate-wide certificate inventory and compliance reporting
- PowerShell 5.1 + 7 compatible; MCP server for integrations
LICENSING & TIERS
- Starter ($79/mo): 2 active SQL instances - TLS, SSRS, Always Encrypted CMK, client trust
- Professional ($499/mo): 25 instances - Starter + TDE, encryption, backup, cell-level keys, endpoint auth, migration
- Enterprise ($1,999/mo): Unlimited instances - Professional + renewal job scheduling
Read-only commands (Get-*, Test-*) are free in all tiers.
REQUIREMENTS
Installed locally on Windows (PowerShell 5.1 or PowerShell 7+). Runs in customer's network - nothing leaves your environment. Operates against SQL Server 2016+ (including 2025).
DEPLOYMENT
dotnet tool install --global DetentPoint.SqlCertForge.Mcp
then sqlcertforge-mcp to start the MCP server, or use Import-Module SqlCertForge for the PowerShell module. All 40 commands available; tier determines which state-changing operations work without license denial.
Highlights
- Provisions the TLS certificate for SQL Server connection encryption end to end: request or import, grant the service account read access to the private key by ACL, write the thumbprint to the instance's registry key, and verify the binding afterwards.
- Covers SSRS and Power BI Report Server as well, through WMI: read the HTTPS configuration, create and remove URL reservations, bind the certificate, and confirm it with a real HTTPS request that checks the served certificate's SAN. No hand-written netsh, SDDL or SID strings.
- No command throws. Every path returns a structured result with a stage, a status of Success, Skipped, Pending or Failed, and a detail line, which is what makes it safe for an AI agent to call. Runs on your own servers with no external module dependencies, under Windows PowerShell 5.1 or PowerShell 7, and its licence verifies offline.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Starter | 2 active SQL Server instances (90-day rolling window). Includes TLS, SSRS/PBIRS, Always Encrypted CMK, client trust. | $79.00 |
Professional | 25 active instances (90-day rolling window). Includes Starter + TDE, encryption, backup, cell-level keys, endpoint auth, migration. | $499.00 |
Enterprise | Unlimited instances (90-day rolling window). Includes Professional + renewal job scheduling. | $1,999.00 |
Dimensions summary
These three tiers scale by how many SQL Server instances you actively manage, counted over a rolling 90-day window. Starter covers 2 active instances. Professional covers 25. Enterprise covers unlimited instances. The tiers also stack in capability: Professional includes everything in Starter plus TDE, backup and cell-level keys, endpoint authentication, and migration. Enterprise includes everything in Professional plus renewal job scheduling. An instance drops off the count after 90 days of no use, so you pay based on current workload rather than a one-time total.
Top-of-mind questions for buyers
An active instance is any SQL Server you currently manage with the tool. Re-running against a server already under management never adds a second count. A server unused for 90 days drops off on its own, no action needed. Read-only audit tools never count against your limit.
Yes. The count reflects servers in active use over a rolling 90-day window. A server you stop managing drops off automatically after 90 days of no use. You pay based on current workload, not a cumulative total. No manual step is required to remove it.
Starter does TLS binding, Reporting Services, Always Encrypted key registration, and client trust. Professional adds TDE, backup and cell-level keys, endpoint authentication, and migration. Enterprise adds renewal job scheduling and matches Professional's tool access, differing only by unlimited capacity. The free read-only audit tools are available at every tier.
www.detentpoint.com
Helpful?
Vendor refund policy
Detent Point LLC offers a full refund within 30 days of the initial purchase of a SqlCertForge contract. Refunds are not offered for renewal terms or after the first 30 days of a term. To request a refund, email Support@DetentPoint.com with your AWS account ID and the purchase date. We acknowledge requests within one business day. Approved refunds are processed through AWS Marketplace and appear as a credit on your AWS bill.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Email: Support@DetentPoint.com
Detent Point LLC provides email support for all paid tiers, with a response target of one business day, Monday through Friday, US Pacific time. Support covers installation, licensing, interpreting results, and defect reports.
Security and vulnerability reports: security@DetentPoint.com Privacy and data handling questions: privacy@DetentPoint.com
Product documentation and release notes are available at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
ProxySQL Product Support subscriptions provide 24x7x365 technical assistance with various support tier options.
Automated SQL Server backup with centralized management. Manage backups across multiple servers from a single dashboard, with scheduled backups and easy database restore.
DynamoSQL is an ANSI SQL query engine for Amazon DynamoDB. Run JOINs, CTEs, aggregations, subqueries, and GROUP BY directly on your DynamoDB tables - no ETL pipelines, no data export, no infrastructure to
manage. Query via a web console or SQL-over-HTTPS API with IAM-based access, temporary credentials, and full CloudTrail auditability.
Universal Desktop Database Tool on Windows Server.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.