To resolve this issue, enable the correct protocols and cipher suites. For more information, see the
Configuring TLS for Infrastructure as a Service Data-in-Transit section of the
VMware vRealize Automation Secure Configuration Guide (
Configuring TLS for Infrastructure as a Service Data-in-Transit)
Alternative Method:
IISCrypto:
IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012, 2016 and 2019. It also lets you reorder SSL/TLS cipher suites offered by IIS, change advanced settings, implement Best Practices with a single click, create custom templates and test your website.
- Download IISCrypto from https://www.nartac.com/Products/IISCrypto
- Install / extract the .exe and copy it to the corresponding IaaS Windows hosts.
- Run IISCrypto as administrator
- Check Server / Client check box
- Select "Apply best practices"
- Remove TLS 1.0 and 1.1 from both client and server.
- Select any additional settings dictated by internal security teams / posture
- Hit "Apply"
- Reboot the Windows host