SQL Server - Encryption in transit

Thanks but I am not referring to SQL Server service instances (although that is helpful!) 

I am asking about the basic out-of-the-box connection between the K2 Windows service and the K2 SQL Server database (when they are on different servers obviously). How can this connection channel be encrypted?

Thanks

Encrypting data in the K2 Database:

https://community.k2.com/t5/K2-blackpearl-Articles/Encrypting-data-in-the-K2-Database/ta-p/88003

Always Encrypted Feature on SQL:

https://help.k2.com/support-services/kbt145231

Hello  @VA1 ,

For protecting data in transit, enterprises often choose to encrypt sensitive data prior to moving and/or use encrypted connections (HTTPS, SSL, TLS, FTPS, etc) to protect the contents of data in transit. For protecting data at rest, enterprises can simply encrypt sensitive files prior to storing them and/or choose to encrypt the storage drive itself.

The most effective data protection methods for both data in transit and data at rest is data encryption.

1. Is end-to-end secure transit used from the device to the web app (SSL/TLS)? SSL3.0, TLS1.0, TLS1.1 and TLS1.2 can be used for secure transit.
2. What is the strength of protection of data in transit (e.g. AES etc.): It depends on the strength of the certificate implemented on the server. The K2 app uses the strongest encryption that the server supports. For K2 Cloud, the certificate uses the sha256WithRSAEncryption algorithm.
3. Does K2 use certificates? If so, are they self signed or provided by a third party?  Yes, if using SSL, these are self signed by you or purchased from a certificate authority (recommended)

Ref: https://help.k2.com/onlinehelp/K2Mobile/UserGuide/Current/default.htm#K2Mobile/Overview/K2MobileAppSecFAQ.htm

1. Allow access to Azure services – accept incoming traffic only from Azure IPs and subnets
2. IP address whitelisting – requires a static IP address from us (K2 Cloud)
3. VNet to VNet VPN – most secure according to this articlefrom MS

Configure SSL Certificate:

https://help.k2.com/onlinehelp/k2blackpearl/DevRef/4.7/default.htm#Configure_SSL.html

How K2 Cloud Secure Data Access Works

https://help.k2.com/kb002739

 How do you protect your data in transit?

https://wa.aws.amazon.com/wat.question.SEC_10.en.html

All the best