https://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx
The following procedure describes how to configure SSL for SQL Server.
To configure SSL
1.
Install a certificate in the Windows certificate store of the server computer.
2.
Click Start, in the Microsoft SQL Server program group, point to Configuration Tools, and then click SQL Server Configuration Manager.
3.
Expand SQL Server Network Configuration, right-click the protocols for the server you want, and then click Properties.
NoteNote
This is the Protocols forsection in the left pane of the tool, not a specific protocol in the right pane.
4.
On the Certificate tab, configure the Database Engine to use the certificate.
5.
On the Flags tab, view or specify the protocol encryption option. The login packet will always be encrypted.
◦
When the ForceEncryption option for the Database Engine is set to Yes, all client/server communication is encrypted and clients that cannot support encryption are denied access.
◦
When the ForceEncryption option for the Database Engine is set to No, encryption can be requested by the client application but is not required.
◦
SQL Server must be restarted after you change the ForceEncryption setting.