We have an on-premises data gateway used by Power Apps and Power BI. We want to force encryption on all of our SQL connections, but because all data transmissions are internal, we are comfortable using the SQL Server Ephemeral Self-Signed cert. A new cert gets recreated each time SQL Server restarts. Our non-prod VMs spin down every evening. It appears that there is no equivillant of a "Trust Server Certificate" flag that you can set on the gateway, so to enforce encryption between the SQL Server and the gateway server, the cert used for encryption needs to be exported from SQL Server, installed on the gateway server, and trusted.
We don't want to have to manage another set of certs, and this is the only thing in our environment that does not appear to natively support the SQL Server ephemeral certs.
Has anyone discovered a work-around for this scenario?
