TLS 1.2 Setup

Former Member
Former Member $organization

Hello,

We're trying to upgrade to TLS version 1.2 as per PCI requirements, however so far have been met with the following error:

Security check could not complete. Cannot connect to the database!
impresario.af_check_security_and_prompt_login.35: SQLSTATE = 08001
Microsoft OLE DB Provider for SQL Server
[DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.

Has anyone else already upgraded and would you be able to let us know the process you followed or how you got past this?

The following actions have been taken:

patched sql 2008 R2 SP3 to Microsoft SQL Server 2008 R2 (SP3-OD) (KB3144114) - 10.50.6542.0 (X64) 
    Feb 22 2016 18:07:23 
    Copyright (c) Microsoft Corporation
    Standard Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1) (Hypervisor)
using patch from : https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=3144114&kbln=en-us
Turned off TLS 1.0 (we need tls 1.1 or higher) on server with key 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
"Enabled"=dword:00000000
Rebooted server
NB On client machine, SSMS can connect to instance - not sure but think that implies native client is OK
But tessitura.exe and security.exe give error as previously stated
Then applied native client fixes as described and rebooted client

Thanks,

Caspian