Questions tagged [schannel]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
140 views

Domain Controller wont Replicate. SChannel issue. Clients cant join domain

I've got an issue with a PDC for a tree domain in our AD forest. It cannot replicate to the other DC's and it's clients are losing trust with the domain and cannot be reset using Test-...
0
votes
0answers
277 views

Windows Server - TLS - Registry - Schannel - SystemDefaultTlsVersions and DisabledByDefault

We have recently disabled TLS 1.0 on some of our servers (a mixture of 2k8 R2, 2k12 R2 and 2016) and on one of them (for now) I see a large amount of Schannel errors in the event viewer: A fatal ...
0
votes
0answers
2k views

SChannel error: The following fatal alert was received: 80 error code 0x80090304

While investigating an issue where some customer requests are being unexpectedly rejected with HTTP 403, I noticed that the Windows event log contains a lot of these errors for source Schannel. ...
0
votes
0answers
351 views

An unknown connection request was received from a remote client application, but none of the cipher … The SSL connection request has failed

I am getting too frequent errors in my System Error Logs : An unknown connection request was received from a remote client application, but none of the cipher suites supported by the client ...
4
votes
1answer
2k views

What are the security risks of selecting “allow local activation security check exemptions”?

When viewing the events in Server Manager under Windows Server 2012 R2, I have many schannel error messages that say "A fatal alert was generated and sent to the remote endpoint. This may result in ...
2
votes
2answers
648 views

SSL/TLS handshake failure

Configuration A Windows 2008R2 RDS server RDS01 A Windows 2008R2 RDS server RDS02 A Windows 2012R2 RemoteApp server APP01 Problem Calling URL https://APP01.domain.local/rdweb : From RDS01 : ...
1
vote
1answer
2k views

TONS of 4625 events. Failed login attempts. No IP, no username

I have a server that gets keeps getting failed login events (4625). They occur roughly every 20-30 minutes daily. Also appears to be on a schedule. I've tried deleting stored credentials. ...
1
vote
0answers
347 views

Left with 0 client certificates to choose from when moving SSRS service to TLS 1.2

Environment: Reporting Services running on a SQL Server 2008 R2 SP3 installation on a Windows 2008 server with .Net 4.6.1 installed and .Net 3.5 enabled as feature. IIS, database and reporting ...
2
votes
1answer
108 views

IIS 7.5 - SSL Fails After Reboot - Rebind Cert fixes until reboot

Recently, my IIS 7.5 SSL site started refusing connections after a reboot. Oddly, the issue can be workaround by binding the site with a different cert and the switching back to the correct one. When ...
0
votes
0answers
1k views

Using a third-party certificate with Active Directory without certificate request

The customer wants to use a COMODO signed TLS certificate for LDAPS on a Windows Server 2012 R2 domain contoller. The certificate was already purchased but the CSR wasn't created on the domain ...
8
votes
4answers
7k views

find the client responsible for the schannel ldap error

somewhere in our network an ldap client is querying our AD servers without the proper CA information. This provokes the (in my view useless) system critical (source: schannel) event id 36887 on the ...
2
votes
3answers
2k views

IIS 8.5 server not accepting a TLS 1.0 connection from Windows Server 2003

(If you're wondering why I'm trying to enable cipher suites that are deprecated, the short answer is that it's for the few people who really can't use anything newer because they're stuck on Windows ...
0
votes
1answer
760 views

ADFS v3 on Windows Server 2012 R2 rejects SSLv3 requests

I faced an issue with ADFS v3 running on Windows Server 2012 R2 When client which is restricted to use SSLv3 only accesses the ADFS site url, the request fails. The same thing works when using ...
0
votes
1answer
2k views

Schannel Event ID 36888 and 36884 Certificate Error

I'm receiving the two following errors every ~60 seconds on a Windows 2008R2 SP1 Server running SQL Server 2008R2: First: Log Name: System Source: Schannel Date: 5/25/2016 9:23:...
4
votes
0answers
516 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
0
votes
0answers
3k views

Fatal schannel issue “A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51”

Recently working on a vps Windows 2012r2 server. Ran into a fatal schannel issue. A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 51. Tracked this ...
1
vote
1answer
23k views

Windows server 2008 R2 Schannel error 36887 fatal alert 46

I have a webserver that is secured using an SSL cert from godaddy. The certificate seems to be working fine for about 30 clients, but one client cannot connect and I cannot for the life of me figure ...
3
votes
2answers
32k views

TLS 1.2 Not showing by default in Windows Server 2012 R2

It is my understanding from reading this article: https://technet.microsoft.com/en-gb/library/dn786418.aspx#BKMK_SchannelTR_TLS12 That in the registry TLS 1.2 should be enabled by default on Windows ...
3
votes
2answers
54k views

Event ID: 36888 The following fatal alert was generated: 10. The internal error state is 10

We are experiencing the following schannel errors most frequently on our Remote Desktop Terminal Servers. Log Name: System Source: Schannel Date: 11/18/2015 1:04:56 PM Event ID: ...
-1
votes
1answer
2k views

TLS 1.0 handshake fails in Windows Server 2012 R2

I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
2
votes
1answer
121k views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
5
votes
1answer
3k views

IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?

I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS); TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ...
3
votes
0answers
3k views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...