During CA Asset Portfolio Management upgrade, the postinstall steps errors with: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption.
search cancel

During CA Asset Portfolio Management upgrade, the postinstall steps errors with: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption.

book

Article ID: 8470

calendar_today

Updated On:

Products

CA IT Asset Manager CA Software Asset Manager (CA SAM) ASSET PORTFOLIO MGMT- SERVER CA Service Management - Asset Portfolio Management CA Service Management - Service Desk Manager

Issue/Introduction

Our environment is configured for SSL with TLS1.2 enabled (TLS 1.1 disabled).  The CA Asset Portfolio Management RU patch install fails: 


09-27,09:11:03 INFO - MDBTools_0101I - Command: install database schema from driver file. 
09-27,09:11:03 INFO - MDBTools_0110I - As user: uapmadmin. 
09-27,09:11:03 INFO - MDBTools_0112I - For vendor: mssql. 
Sep 27, 2017 9:11:06 AM com.microsoft.sqlserver.jdbc.TDSChannel enableSSL 
WARNING: TDSChannel ( ConnectionID:1 TransactionID:0x0000000000000000) SSL handshake failed: SQL Server did not return a response. The connection has been closed. 
Sep 27, 2017 9:11:06 AM com.microsoft.sqlserver.jdbc.TDSChannel enableSSL 
WARNING: TDSChannel ( ConnectionID:2 TransactionID:0x0000000000000000) SSL handshake failed: SQL Server did not return a response. The connection has been closed. 
09-27,09:11:06 INFO - Url: jdbc:sqlserver:<server_name:portnumber>;DatabaseName=mdb 
09-27,09:11:06 INFO - User: uapmadmin 
09-27,09:11:06 INFO - ErrorCode: 0 
09-27,09:11:06 ERROR - The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: SQL Server did not return a response. The connection has been closed.. 
09-27,09:11:06 INFO - MDBTools_0104I - Total time: 0H:0M:2S. 
09-27,09:11:07 MDBTools install error=3 
09-27,09:11:07 Setupmdb exit /B return code=3

Environment

CA Asset Portfolio Management 17.X

Resolution

Steps to resolve: 

1. Disable TLS 1.2. Run the MDB Command defined in the patch readme file.

2. After confirming the successful upgrade, enable TLS 1.2 again. 

3. Steps to disable/enable TLS are located here: 

https://blogs.msdn.microsoft.com/friis/2016/07/25/disabling-tls-1-0-on-your-windows-2008-r2-server-just-because-you-still-have-one/