CB Protection: Error: "[DBNETLIB][ConnectionOpen (SECCreateCredentials()).]SSL Security error. (18)"

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• When installing CB Protection server and choosing "Use existing database", error is received:
  • "There was an error logging in to <Server>. Error: [DBNETLIB][ConnectionOpen (SECCreateCredentials()).]SSL Security error. (18)"

Environment

• CB Protection Server: 7.x - 8.0.x
• Microsoft Windows Server: All Supported Versions

Cause

• TLS has been hardened in the environment. CB Protection Server versions 7.x and 8.0.x requires TLS 1.0 be enabled for initial install.

Resolution

1. Re-enable TLS 1.0 on both the CB Protection app and CBP SQL Server using Microsofts recommended steps.
   • https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings
2. Restart CBP application and SQL Server to apply registry changes
3. Re-try installation
4. Re-disable TLS 1.0 if desired

Additional Information

CB Protection Server version 8.1.x supports TLS 1.2 during installation