MetricSign
Start free
Medium severitygateway

Power BI Refresh Error:
The server name provided doesn't match the server name on the SQL Server SSL certificate

What does this error mean?

SSL cert mismatch: the hostname in the connection string doesn't match the SQL Server certificate CN or SAN. Fix by using the correct FQDN in Power BI.

Common causes

  • 1The connection string uses an IP address, but the SSL certificate was issued for a hostname (or vice versa)
  • 2The SQL Server was migrated to a new host but the connection string was not updated
  • 3The SSL certificate was issued for a short name (e.g., 'sql01') but the connection uses the FQDN
  • 4A load balancer or alias is being used that doesn't match the certificate CN/SAN
  • 5Self-signed certificate installed on SQL Server uses a different name than expected

How to fix it

  1. 1Verify the exact hostname in the connection string matches the certificate's Common Name (CN) or Subject Alternative Name (SAN).
  2. 2Update the data source connection in Power BI Desktop to use the FQDN that matches the certificate.

Beyond the docs

Common practitioner solutions not covered in the official documentation.

  1. 1If the certificate is self-signed and trusted internally, add it to the gateway machine's Trusted Root Certification Authorities store
  2. 2Ask your DBA to reissue the SQL Server SSL certificate with the correct hostname or add a SAN entry
  3. 3As a temporary workaround, you can disable SSL encryption in the gateway data source settings (not recommended for production)

Frequently asked questions

Does this error affect all datasets using the same gateway?

Yes — all datasets routed through the affected gateway will fail simultaneously. Resolving the gateway configuration or credential issue restores all of them at once.

Does this error appear in Power BI Desktop?

No — Power BI Desktop connects directly to data sources. Gateway errors only occur when Power BI Service initiates a scheduled or manual refresh.

Can this error resolve itself without intervention?

No — gateway errors require manual action: re-entering credentials, restarting the gateway service, or correcting the network path between the gateway and the data source.

How long does it typically take to fix?

A simple credential refresh takes 5–10 minutes. Network or firewall issues can take 30–120 minutes depending on your infrastructure access.

Source · learn.microsoft.com/en-us/power-bi/connect-data/service-gateway-onprem-tshoot

Other gateway errors