Unable to log in to Endpoint Protection Manager with error: Unexpected Server Error.

Products

• Endpoint Protection
• Endpoint Security Complete

Issue/Introduction

Unable to log in to Symantec Endpoint Protection Manager (SEPM) server with error:

Checking scm-server log similar error can be found:

java.sql.SQLException: Cannot create PoolableConnectionFactory (Connection reset)

While capture traffic with wireshark there is SSL session setup between SEPM server and SQL but just after that it is Reset by SQL.

This events repeat over and over again.

Examining Server Hello packet coming form SQL server, you can notice that despite client present redlines to set up session with TLS 1.2 SQL server degrades negotiations to TLS 1.0.

Environment

SEPM server with external database hosted on other system.

Cause

SQL server is not patched to support TLS1.2.

Resolution

Please install patch that introduced the support for TLS 1.2 on SQL server.

Additional Information

As a temporary solution you can disable encryption on SEPM side (SetSQLServerTLSEncryption.bat) and it will allow you to connect with database and log in - however this communication is not secure.