Management node migration is blocked in Windows 2008r2 vCenter Server 6.0 without previously enabling Transport Layer Security 1.2, error: "ConnectToLdapServer: Failed to connect to the LDAP server. Error code: 81"
Article ID: 338214
Updated On:
Products
VMware vCenter Server
Issue/Introduction
Symptoms:
- Management node migration is blocked if Windows vCenter Server 6.0 is running on Windows Server 2008 R2 without previously enabling Transport Layer Security 1.2.
- After migrating the external Platform Services Controller (PSC), when running Migration Assistant on the Management node it fails, reporting that it can not retrieve the PSC version.
Environment
VMware vCenter Server Appliance 6.0.x
Cause
This error occurs because Windows Server 2008 R2 does not support TLS 1.2 by default, which is the default Transport Layer Security protocol for Platform Services Controller 6.7.
Resolution
Enable Transport Layer Security 1.2 for Windows Server 2008 R2:
1. Navigate to the registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
2. Create a new folder and label it: 'TLS 1.2'
3. Create two new keys with the 'TLS 1.2' folder, and name the keys "Client" and "Server".
4. Under the Client key, create two DWORD (32-bit) values, and name them "DisabledByDefault" and "Enabled".
5. Under the Server key, create two DWORD (32-bit) values, and name them "DisabledByDefault" and "Enabled".
6. Ensure that the Value data field is set to 0 and the Base is Hexadecimal for "DisabledByDefault".
7. Ensure that the Value data field is set to 1 and the Base is Hexadecimal for "Enabled".
8. Reboot the Windows Server 2008 R2 computer.
For more information on using Transport Layer Security 1.2 with Windows Server 2008 R2, refer to the operating system vendor's documentation.
1. Navigate to the registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
2. Create a new folder and label it: 'TLS 1.2'
3. Create two new keys with the 'TLS 1.2' folder, and name the keys "Client" and "Server".
4. Under the Client key, create two DWORD (32-bit) values, and name them "DisabledByDefault" and "Enabled".
5. Under the Server key, create two DWORD (32-bit) values, and name them "DisabledByDefault" and "Enabled".
6. Ensure that the Value data field is set to 0 and the Base is Hexadecimal for "DisabledByDefault".
7. Ensure that the Value data field is set to 1 and the Base is Hexadecimal for "Enabled".
8. Reboot the Windows Server 2008 R2 computer.
For more information on using Transport Layer Security 1.2 with Windows Server 2008 R2, refer to the operating system vendor's documentation.
Additional Information
Feedback
Yes
No
Powered by
