Bulk Load Client Fails TLS 1.2 HTTPS Connection With SSL Handshake Error

Products

• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Attempting to use the Bulk Load Client to connect to Secure Cloud via HTTPS fails. The Bulk Load Client log shows SSL Handshake errors. The problem started happening on the evening of August 9, 2018.

Environment

Secure Cloud

Cause

Secure Cloud (US) was updated on August 9 to remove support for TLS 1.0 and TLS 1.1 protocols. The Bulk Load Client's imbulkloadclient.bat file by default points to the embedded JVM which is a Java 6 version (i.e. ..\_uninst\_jvm\bin\java) but Java 6 does not support TLS 1.2 protocol.

Resolution

Install Java 8 and edit the Bulk Load Client's imbulkloadclient.bat file to instead use the Java 8 version of java.exe which support TLS 1.2 protocol.