How to make CA Automation Point communicate with the Remote Notification Manager MS SQL Server database via TLS 1.2?

Products

• Automation Point

Issue/Introduction

How to make CA Automation Point communicate with the Remote Notification Manager MS SQL Server database via TLS 1.2?

Environment

MS Windows Server and MS SQL Server

Resolution

Follow these steps:

1) Disable the older compromised protocols in MS Windows registry of your MS SQL Server DB machine, by setting the following values:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server] "Enabled"=dword:00000000

2) Enable TLS 1.2 in MS Windows registry of both the CA Automation Point and the MS SQL Server DB machine by setting following values (the Server value is necessary only for the DB server):
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "Enabled"=dword:00000001

3) Make sure that your version of MS SQL Server supports TLS 1.2 communication. List of versions required are in following article: https://support.microsoft.com/en-sg/help/3135244/tls-1.2-support-for-microsoft-sql-server , please see the table in the section “How to know whether you need this update” to see if your version supports TLS 1.2 and update if you need to.

4) If you use MS SQL Server 2012 download and install "Microsoft SQL Server 2012 Native Client - QFE" on your CA Automation Point machine, download link is available inside the Microsoft support article linked in step 3. If you use MS SQL Server 2008, you have to download a correct version of “Microsoft SQL Server 2008 Native Client”.

Additional Information

You can find additional information at our website: CA Technologies Documentation