Skip to the content
The Update Bureau
SQL Server 2017 SP3 AC + GDR SQL Server 2017 SP3 AC + GDR Out-of-band update
Out-of-band

KB5050533

KB5050533: Security update for SQL Server 2017, Azure Connect Feature Pack branch, March 2025. Database links to Azure SQL Managed Instance added

In short

The feature pack adds database replication from SQL Server to Azure SQL Managed Instance. It also improves connections and certificate handling.

Does it affect you? Applies to: SQL Server 2017 users. Distributed availability group replication with Azure resources is enabled for SQL Server Standard editions.

Build
14.0.3490.10
Servicing branch
Azure Connect Feature Pack

For servers on the Azure Connect Feature Pack of Service Pack 3, the branch with fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?

What changes

Improvements 3 changes

Distributed availability groups and Service Broker

  • You can use distributed availability groups and Service Broker connections with Azure SQL Managed Instance.1
    Adds an improvement to enable distributed availability groups and Service Broker connections with Azure SQL Managed Instance.

Certificate-based authentication

  • Certificate checks for database mirroring and Service Broker connections support easier certificate rotation and management.2
    Improves certificate-based authentication between endpoints for database mirroring (Always On) and Service Broker connections. This supports rotation and management of certificates issued by a certificate authority.

Database mirroring endpoints

  • You can use a signed certificate with several DNS names and choose one to secure database mirroring endpoints.3
    Supports signed certificates with multiple Domain Name System (DNS) names, allowing selection of a single DNS name for securing database mirroring endpoints in SQL Server.

New features 2 changes

Link feature

  • You can replicate databases from SQL Server to Azure SQL Managed Instance with the link feature.4
    Adds support for the link feature for Azure SQL Managed Instance.

Distributed availability groups

For: SQL Server Standard users

  • SQL Server Standard editions can use distributed availability groups to replicate databases with Azure resources.5
    Enables distributed availability groups in SQL Server Standard editions to establish database replication with Azure resources.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-03-06
Type
Cumulative update
Servicing branch
Azure Connect Feature Pack
Replaced by
KB5058714
VersionBuildChannel
2017 14.0.3490.10 General availability

Security

No vulnerabilities are listed for this update.

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. Adds improvement to enable distributed availability groups and service broker connections with Azure SQL Managed Instance. support.microsoft.com
  2. 2. Adds improvement to certificate-based authentication between endpoints for database mirroring (Always On) and service broker connections, which facilitates rotation and management of certificates that are issued by a certificate authority. support.microsoft.com
  3. 3. Adds improvement to use signed certificates that have multiple Domain Name System (DNS) names, which allows a selection of a single DNS name for securing database mirroring endpoints in SQL Server. support.microsoft.com
  4. 4. Adds support for the link feature for Azure SQL Managed Instance, which enables database replication from SQL Server to Azure SQL Managed Instance. support.microsoft.com
  5. 5. Enables distributed availability groups in SQL Server Standard editions to establish database replication with Azure resources. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 3/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake