In UIM 20.3+, many Java Probes won't start.

book

Article ID: 222873

calendar_today

Updated On:

Products

DX Infrastructure Management

Issue/Introduction

After upgrading/installing UIM 20.3+, Java Probes that connect to the UIM database (MSSQL) will not start.  Errors similar to the following appear in the logs:

27 Aug 2021 04:51:39,477 [main] FATAL com.nimsoft.discovery.server.probe.DiscoveryServerProbe - Error initializing probe: java.lang.RuntimeException: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "The server selected protocol version TLS10 is not accepted by client preferences [TLS12]". ClientConnectionId:fc83bebb-0977-4a32-8ba3-f3cedc5812c7
27 Aug 2021 04:51:39,477 [main] FATAL com.nimsoft.discovery.server.probe.DiscoveryServerProbe - java.lang.RuntimeException: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "The server selected protocol version TLS10 is not accepted by client preferences [TLS12]". ClientConnectionId:fc83bebb-0977-4a32-8ba3-f3cedc5812c7
 at com.nimsoft.nis.db.DbUtils.determineDbProvider(DbUtils.java:45)
 at com.nimsoft.nis.db.DbConnectionSourceImpl.<init>(DbConnectionSourceImpl.java:27)
 at com.nimsoft.nis.dao.AbstractNisDao.<init>(AbstractNisDao.java:12)
 at com.nimsoft.nis.dao.CmBlacklistComputerSystemDao.<init>(CmBlacklistComputerSystemDao.java:32)
 at com.nimsoft.nis.dao.DaoFactory.<init>(DaoFactory.java:63)
 at com.nimsoft.discovery.server.probe.ProbeInitializer.initDataAccess(ProbeInitializer.java:198)
 at com.nimsoft.discovery.server.probe.ProbeInitializer.init(ProbeInitializer.java:70)
 at com.nimsoft.discovery.server.probe.DiscoveryServerProbe.initialize(DiscoveryServerProbe.java:130)
 at com.nimsoft.pf.ProbeFramework.initialize(ProbeFramework.java:145)
 at com.nimsoft.nimbus.PFProbe.initialize(PFProbe.java:490)
 at com.nimsoft.nimbus.PFProbe.doForever(PFProbe.java:519)
 at com.nimsoft.discovery.server.probe.DiscoveryServerProbe.main(DiscoveryServerProbe.java:52)
Caused by: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "The server selected protocol version TLS10 is not accepted by client preferences [TLS12]". ClientConnectionId:fc83bebb-0977-4a32-8ba3-f3cedc5812c7

Cause

Java_jre 2.07 security settings have disabled use of TLS 1.0 and 1.1.  If the MSSQL database is only configured to use those TLS versions, this error will be encountered.

Environment

Release : 20.3

Component : UIM - INSTALL

Resolution

Either configure the database to allow TLS 1.2 connections or deploy java_jre 2.05 which allow TLS 1.0 and 1.1 MSSQL connections.

Additional Information

For security reasons, it is highly suggested in this case to configure the MSSQL database to allow TLS 1.2 over deploying java_jre 2.05.