Service Broker endpoint supports both Windows Authentication and Certificate Based Authentication. Windows Authentication is preferred if the distributed Service Broker endpoints are in the same windows domains, and Certificate Based Authentication is used if these endpoints are in two different windows domains.

Windows Authentication uses NTLM or Kerberos protocols (depending on how your network is configured) to authenticate Service Broker endpoints while Certificate Authentication mode uses TLS (Transport Layer Security) protocol for authenticating endpoints. As Certificate Based Authentication uses the certificates, it does not need to contact the domain controller and hence performs faster across windows domains.

Published under: SQL Server Tips ·  ·  ·  ·