A SQL Server technology that supports the creation, management, and delivery of both traditional, paper-oriented reports and interactive, web-based reports.
For Power BI Report Server DirectQuery, the likely issue is the SQL Server certificate trust requirement during server-side rendering.
Supported facts for this scenario:
- Power BI Report Server does not support OAuth-based authentication for DirectQuery.
- Power BI DirectQuery reports must include
Encrypt=True;TrustServerCertificate=Truein the connection string, orPBI_SQL_TRUSTED_SERVERSmust be applied on the Power BI Report Server. - If the report works in Power BI Desktop but fails only when rendered in PBIRS, the server-side trust configuration is the part to fix.
Actionable path:
- On the Power BI Report Server machine, set the environment variable
PBI_SQL_TRUSTED_SERVERSto include the SQL Server instance name.- The value supports a comma-delimited list.
- It also supports
*as a wildcard. - Example:
contososql*,mysvr
- Make sure the value matches the exact server name pattern used by the report connection.
-
mysvrmatchesmysvr - It does not match
mysvr.microsoft.com
-
- After changing the environment variable, restart the report server so the setting is picked up.
- If the SQL Server uses a self-signed certificate, the more durable fix is to have the SQL Server administrators install a certificate from a well-known certificate authority.
- If the report uses DirectQuery and the connection string cannot be edited manually, use a supported update path only if the report was built with:
- Enhanced DataSet Metadata enabled
- parameterized connections Only reports with parameterized connections and databases can be updated after publishing.
- Verify the authentication configuration only if Kerberos/delegation is intended. The specific error text about Analysis Services can also appear when report server authentication/delegation is not configured correctly in distributed environments. In that case,
RSWindowsNegotiateshould be the first authentication type inrsreportserver.config, and Kerberos constrained delegation must be configured.
If Basic authentication is being used only for report server access, that does not remove the DirectQuery SQL trust requirement on PBIRS.
References: