Questions tagged [schannel]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
39 views

ADFS - Cannot re-establish trust. Seems client certificate authentication not working. Probably cannot use TLS Client Authentication

So we had ADFS Proxy connected with ADFS (Install-WebApplicationProxy), both Windows Server 2019. Had to re-establish the trust, but it waits a loong time, retrying auth AD FS Event logs ADFS Side has ...
Janis Veinbergs's user avatar
0 votes
1 answer
77 views

Should Ssl renegotiate messages be encrypted?

In RFC5246 it is not mentioned that Ssl renegotiate messages should be encrypted. But when using Windows Schannel API I see that the renegotiate messages are encrypted. I tried to send a crafted "...
AHS's user avatar
  • 101
1 vote
1 answer
152 views

How do I view contents of incoming bindRequests to Active Directory DS?

I have a full fledged AD DS running on Windows server 2016. I have a spring app which I am using to authenticate against my active directory database using a simple authentication bind over a ssl ...
ThunderMead's user avatar
2 votes
1 answer
12k views

Still suffering from Windows NPS May 2022 Certficate Update

in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working. Here is an additional resource with ...
namezero's user avatar
  • 181
1 vote
1 answer
8k views

Windows Server 2012 R2 - Adding Cipher

this might be a complete newbee question. I have an 2012 R2 Server on which an application should call a partner who only offers the following ciphers: (0xc02f) TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ...
Moritz's user avatar
  • 43
0 votes
0 answers
2k views

Domain Controller wont Replicate. SChannel issue. Clients cant join domain

I've got an issue with a PDC for a tree domain in our AD forest. It cannot replicate to the other DC's and it's clients are losing trust with the domain and cannot be reset using Test-...
Coldsweat25's user avatar
1 vote
0 answers
6k views

SChannel error: The following fatal alert was received: 80 error code 0x80090304

While investigating an issue where some customer requests are being unexpectedly rejected with HTTP 403, I noticed that the Windows event log contains a lot of these errors for source Schannel. ...
Guillaume CR's user avatar
0 votes
0 answers
1k views

An unknown connection request was received from a remote client application, but none of the cipher ..... The SSL connection request has failed

I am getting too frequent errors in my System Error Logs : An unknown connection request was received from a remote client application, but none of the cipher suites supported by the client ...
khalidmehmoodawan's user avatar
5 votes
1 answer
6k views

What are the security risks of selecting "allow local activation security check exemptions"?

When viewing the events in Server Manager under Windows Server 2012 R2, I have many schannel error messages that say "A fatal alert was generated and sent to the remote endpoint. This may result in ...
enharmonic's user avatar
2 votes
2 answers
1k views

SSL/TLS handshake failure

Configuration A Windows 2008R2 RDS server RDS01 A Windows 2008R2 RDS server RDS02 A Windows 2012R2 RemoteApp server APP01 Problem Calling URL https://APP01.domain.local/rdweb : From RDS01 : ...
alex's user avatar
  • 141
1 vote
1 answer
8k views

TONS of 4625 events. Failed login attempts. No IP, no username

I have a server that gets keeps getting failed login events (4625). They occur roughly every 20-30 minutes daily. Also appears to be on a schedule. I've tried deleting stored credentials. ...
ToatesMagoats's user avatar
2 votes
0 answers
821 views

Left with 0 client certificates to choose from when moving SSRS service to TLS 1.2

Environment: Reporting Services running on a SQL Server 2008 R2 SP3 installation on a Windows 2008 server with .Net 4.6.1 installed and .Net 3.5 enabled as feature. IIS, database and reporting ...
Ignacio Soler Garcia's user avatar
2 votes
1 answer
286 views

IIS 7.5 - SSL Fails After Reboot - Rebind Cert fixes until reboot

Recently, my IIS 7.5 SSL site started refusing connections after a reboot. Oddly, the issue can be workaround by binding the site with a different cert and the switching back to the correct one. When ...
Joe Mroczek's user avatar
0 votes
0 answers
2k views

Using a third-party certificate with Active Directory without certificate request

The customer wants to use a COMODO signed TLS certificate for LDAPS on a Windows Server 2012 R2 domain contoller. The certificate was already purchased but the CSR wasn't created on the domain ...
ercpe's user avatar
  • 576
8 votes
5 answers
11k views

find the client responsible for the schannel ldap error

somewhere in our network an ldap client is querying our AD servers without the proper CA information. This provokes the (in my view useless) system critical (source: schannel) event id 36887 on the ...
natxo asenjo's user avatar
  • 5,819
2 votes
3 answers
4k views

IIS 8.5 server not accepting a TLS 1.0 connection from Windows Server 2003

(If you're wondering why I'm trying to enable cipher suites that are deprecated, the short answer is that it's for the few people who really can't use anything newer because they're stuck on Windows ...
Jesper's user avatar
  • 115
0 votes
1 answer
827 views

ADFS v3 on Windows Server 2012 R2 rejects SSLv3 requests

I faced an issue with ADFS v3 running on Windows Server 2012 R2 When client which is restricted to use SSLv3 only accesses the ADFS site url, the request fails. The same thing works when using ...
Mr Cuco's user avatar
-1 votes
1 answer
4k views

Schannel Event ID 36888 and 36884 Certificate Error

I'm receiving the two following errors every ~60 seconds on a Windows 2008R2 SP1 Server running SQL Server 2008R2: First: Log Name: System Source: Schannel Date: 5/25/2016 9:23:...
Justin Russell's user avatar
4 votes
0 answers
722 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
Martin Blore's user avatar
0 votes
0 answers
4k views

Fatal schannel issue "A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51"

Recently working on a vps Windows 2012r2 server. Ran into a fatal schannel issue. A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51. Tracked this ...
tdev's user avatar
  • 14
1 vote
1 answer
30k views

Windows server 2008 R2 Schannel error 36887 fatal alert 46

I have a webserver that is secured using an SSL cert from godaddy. The certificate seems to be working fine for about 30 clients, but one client cannot connect and I cannot for the life of me figure ...
elevenUser's user avatar
5 votes
2 answers
50k views

TLS 1.2 Not showing by default in Windows Server 2012 R2

It is my understanding from reading this article: https://technet.microsoft.com/en-gb/library/dn786418.aspx#BKMK_SchannelTR_TLS12 That in the registry TLS 1.2 should be enabled by default on Windows ...
Uberzen1's user avatar
  • 189
3 votes
2 answers
62k views

Event ID: 36888 The following fatal alert was generated: 10. The internal error state is 10

We are experiencing the following schannel errors most frequently on our Remote Desktop Terminal Servers. Log Name: System Source: Schannel Date: 11/18/2015 1:04:56 PM Event ID: ...
DanielJay's user avatar
  • 265
-1 votes
1 answer
3k views

TLS 1.0 handshake fails in Windows Server 2012 R2

I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
Vladimir Lapacek's user avatar
4 votes
1 answer
142k views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
tobi.at's user avatar
  • 143
5 votes
1 answer
4k views

IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?

I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS); TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ...
Steve365's user avatar
  • 1,263
3 votes
0 answers
4k views

SChannel "cannot find certificate in either LocalMachine or CurrentUser store"

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
Callie J's user avatar
  • 1,218