Force Client to Validate SSL Certificate?
My question is this how we can force the client (by the server or any way) to verify the certificate regardless of the connection string value?


Connection string values override defaults set in the driver if the connection string has the item filled in. There is no overarching way of forcing this except to use TrustServerCertificate=false in the connection string to zero out any other options.