Error: Could not create SSL/TLS secure channel
Article ID: KB0081941
Updated On:
| Products | Versions |
|---|---|
| Spotfire Desktop | All supported versions |
Description
After entering a URL into a Data Connector for external data access, the following error is thrown.
"External error: The request was aborted: Could not create SSL/TLS secure channel."
"External error: The request was aborted: Could not create SSL/TLS secure channel."
Issue/Introduction
When attempting to access data with Data Connectors, an error is thrown about a secure SSL/TSL channel.
Environment
Product: TIBCO Spotfire (Desktop client / Analyst / Professional)
Version: All supported versions
OS: All supported Operating Systems
Resolution
Two places to check:
1). Check Internet Explorer Security settings.
===============
1). Open Internet Explorer. click on the Gear icon in the upper right hand corner and then click on "Internet Options".
2). Click on the "Advanced" tab.
3). Scroll down through the "Settings:" list to the "Security" section.
4). Add a check mark to "Use TLS 1.1" and/or "Use TLS 1.2", and uncheck any older versions of TLS.
5). Save the changes.
===============
2). Update Registry settings.
Click on Start/Run/Regedit and add the following keys/DWORDS:
=========
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server\Enabled (Value=1)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server\DisabledByDefault (Value=0)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319\SchUseStrongCrypto (Value=1)
=========
See the attached screen shots (Filenames: RegEdit TLS.jpg and RegEdit Crypto.jpg).
After making the changes, reboot the computer.
1). Check Internet Explorer Security settings.
===============
1). Open Internet Explorer. click on the Gear icon in the upper right hand corner and then click on "Internet Options".
2). Click on the "Advanced" tab.
3). Scroll down through the "Settings:" list to the "Security" section.
4). Add a check mark to "Use TLS 1.1" and/or "Use TLS 1.2", and uncheck any older versions of TLS.
5). Save the changes.
===============
2). Update Registry settings.
Click on Start/Run/Regedit and add the following keys/DWORDS:
=========
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server\Enabled (Value=1)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server\DisabledByDefault (Value=0)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319\SchUseStrongCrypto (Value=1)
=========
See the attached screen shots (Filenames: RegEdit TLS.jpg and RegEdit Crypto.jpg).
After making the changes, reboot the computer.
Attachments
Feedback
Yes
No
Powered by
