I’m trying to install BFI 10.0.7 on a fresh new server and starting a new database but when trying to create the temadb database the log presents the following error:
ERROR: Database connection error: Java::ComMicrosoftSqlserverJdbc::SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: “The server selected protocol version TLS10 is not accepted by client preferences [TLS12]”.
The new server environment uses the same hostname and IP address of the former server that was running BFI 9.x.
The MS SQL Server is in a different server and I was able to connect to it with ODBC connection.
I’ve tried the solution described below but still no success:
https://www.ibm.com/support/pages/creating-temadb-database-failed-driver-could-not-establish-secure-connection-sql-server-using-secure-sockets-layer-ssl-encryption-error
What am I missing?
BFI by default uses TLS 1.2 and looks like TLS 1.2 is not enabled on the SQL server. Check with your SQL Admin to see if they can disable TSL 1.0/1.1 and enable TLS 1.2
I’ve double checked and TLS 1.2 it is enabled on the SQL Server as well. Actually if a turn off the new BFI Server and turn on again the old server it works properly, which leads me to think that the problem is not on SQL server side.
Current environment: Windows Server 2008, BigFix Inventory 10.0.2
Planned environment: Windows Server 2019 Datacenter, BigFix Inventory 10.0.7
In time, I’ve disabled the options to use TLS 1.0 and TLS 1.1 in both servers to force TLS 1.2 communication between BFI server and SQL server but still got the same error.
The problem was solved after installing the Service Pack 4 for MS SQL Server 2012 and restarting both servers.
Thanks for the help.