Questions tagged [schannel]
The schannel tag has no usage guidance.
26
questions
0
votes
1
answer
56
views
Should Ssl renegotiate messages be encrypted?
In RFC5246 it is not mentioned that Ssl renegotiate messages should be encrypted.
But when using Windows Schannel API I see that the renegotiate messages are encrypted.
I tried to send a crafted "...
- 101
1
vote
1
answer
57
views
How do I view contents of incoming bindRequests to Active Directory DS?
I have a full fledged AD DS running on Windows server 2016. I have a spring app which I am using to authenticate against my active directory database using a simple authentication bind over a ssl ...
- 13
1
vote
1
answer
8k
views
Still suffering from Windows NPS May 2022 Certficate Update
in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working.
Here is an additional resource with ...
- 171
1
vote
1
answer
7k
views
Windows Server 2012 R2 - Adding Cipher
this might be a complete newbee question.
I have an 2012 R2 Server on which an application should call a partner who only offers the following ciphers:
(0xc02f) TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ...
- 33
0
votes
0
answers
2k
views
Domain Controller wont Replicate. SChannel issue. Clients cant join domain
I've got an issue with a PDC for a tree domain in our AD forest. It cannot replicate to the other DC's and it's clients are losing trust with the domain and cannot be reset using Test-...
- 71
1
vote
0
answers
5k
views
SChannel error: The following fatal alert was received: 80 error code 0x80090304
While investigating an issue where some customer requests are being unexpectedly rejected with HTTP 403, I noticed that the Windows event log contains a lot of these errors for source Schannel.
...
- 151
0
votes
0
answers
1k
views
An unknown connection request was received from a remote client application, but none of the cipher ..... The SSL connection request has failed
I am getting too frequent errors in my System Error Logs :
An unknown connection request was received from a remote client
application, but none of the cipher suites supported by the client
...
5
votes
1
answer
6k
views
What are the security risks of selecting "allow local activation security check exemptions"?
When viewing the events in Server Manager under Windows Server 2012 R2, I have many schannel error messages that say "A fatal alert was generated and sent to the remote endpoint. This may result in ...
- 176
2
votes
2
answers
1k
views
SSL/TLS handshake failure
Configuration
A Windows 2008R2 RDS server RDS01
A Windows 2008R2 RDS server RDS02
A Windows 2012R2 RemoteApp server APP01
Problem
Calling URL https://APP01.domain.local/rdweb :
From RDS01 : ...
- 141
1
vote
1
answer
7k
views
TONS of 4625 events. Failed login attempts. No IP, no username
I have a server that gets keeps getting failed login events (4625). They occur roughly every 20-30 minutes daily. Also appears to be on a schedule.
I've tried deleting stored credentials. ...
2
votes
0
answers
788
views
Left with 0 client certificates to choose from when moving SSRS service to TLS 1.2
Environment:
Reporting Services running on a SQL Server 2008 R2 SP3 installation on a Windows 2008 server with .Net 4.6.1 installed and .Net 3.5 enabled as feature. IIS, database and reporting ...
2
votes
1
answer
256
views
IIS 7.5 - SSL Fails After Reboot - Rebind Cert fixes until reboot
Recently, my IIS 7.5 SSL site started refusing connections after a reboot. Oddly, the issue can be workaround by binding the site with a different cert and the switching back to the correct one.
When ...
- 21
0
votes
0
answers
2k
views
Using a third-party certificate with Active Directory without certificate request
The customer wants to use a COMODO signed TLS certificate for LDAPS on a Windows Server 2012 R2 domain contoller.
The certificate was already purchased but the CSR wasn't created on the domain ...
- 576
8
votes
5
answers
11k
views
find the client responsible for the schannel ldap error
somewhere in our network an ldap client is querying our AD servers without the proper CA information. This provokes the (in my view useless) system critical (source: schannel) event id 36887 on the ...
- 5,789
2
votes
3
answers
3k
views
IIS 8.5 server not accepting a TLS 1.0 connection from Windows Server 2003
(If you're wondering why I'm trying to enable cipher suites that are deprecated, the short answer is that it's for the few people who really can't use anything newer because they're stuck on Windows ...
- 115
0
votes
1
answer
818
views
ADFS v3 on Windows Server 2012 R2 rejects SSLv3 requests
I faced an issue with ADFS v3 running on Windows Server 2012 R2
When client which is restricted to use SSLv3 only accesses the ADFS site url, the request fails.
The same thing works when using ...
- 1
-1
votes
1
answer
4k
views
Schannel Event ID 36888 and 36884 Certificate Error
I'm receiving the two following errors every ~60 seconds on a Windows 2008R2 SP1 Server running SQL Server 2008R2:
First:
Log Name: System
Source: Schannel
Date: 5/25/2016 9:23:...
4
votes
0
answers
693
views
Schannel Error - Random
I'm currently experiencing an issue on a Windows Server 2012 R2.
In the event log is an Error for the Source "Schannel". The error description is:
"A fatal alert was generated and sent to the ...
- 41
0
votes
0
answers
4k
views
Fatal schannel issue "A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51"
Recently working on a vps Windows 2012r2 server. Ran into a fatal schannel issue.
A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51.
Tracked this ...
- 14
1
vote
1
answer
30k
views
Windows server 2008 R2 Schannel error 36887 fatal alert 46
I have a webserver that is secured using an SSL cert from godaddy. The certificate seems to be working fine for about 30 clients, but one client cannot connect and I cannot for the life of me figure ...
- 13
4
votes
2
answers
49k
views
TLS 1.2 Not showing by default in Windows Server 2012 R2
It is my understanding from reading this article:
https://technet.microsoft.com/en-gb/library/dn786418.aspx#BKMK_SchannelTR_TLS12
That in the registry TLS 1.2 should be enabled by default on Windows ...
- 179
3
votes
2
answers
62k
views
Event ID: 36888 The following fatal alert was generated: 10. The internal error state is 10
We are experiencing the following schannel errors most frequently on our Remote Desktop Terminal Servers.
Log Name: System
Source: Schannel
Date: 11/18/2015 1:04:56 PM
Event ID: ...
- 265
-1
votes
1
answer
3k
views
TLS 1.0 handshake fails in Windows Server 2012 R2
I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
3
votes
1
answer
141k
views
SChannel errors after enabling SSL on a Windows Server 2012 R2
I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
- 133
5
votes
1
answer
3k
views
IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?
I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS);
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
...
- 1,263
3
votes
0
answers
4k
views
SChannel "cannot find certificate in either LocalMachine or CurrentUser store"
We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control).
This has worked without problems before but on deploying ...
- 1,218