A set of TLS protocols and cipher suites are used for backend communication (between the Spotfire Server, the Node Manager and the various services handled by the Node Manager.
When troubleshooting trust issues between Spotfire Server and Node Manager one may need to check the Cipher suites enabled on the machine/server in question. Or even have the right ones enabled if they are not.

 

Using IISCrypto tool to enable or disable ciphers suites when troubleshooting trust issues between Spotfire Server and Node Manager

All Supported Operating systems

IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012 and 2016. It also lets you reorder SSL/TLS cipher suites offered by IIS, implement best practices with a single click, create custom templates and test your website.
Rather than manually making changes to the Registry Editor, IISCrypto does all of this work for you. The GUI is easy to use and gives you plenty of options to chose from.


IISCrypto can be downloaded from the link below:

https://www.nartac.com/Products/IISCrypto/Download



- Check/Enable the desired Ciphers


After enabling/disabling the Ciphers a restart of the machine is required for the changes to take effect.
It is always recommended to consult a Windows Admin/Local IT team before running this tool, enabling/disabling Cipher suites.

ERROR;2018-03-26T10:48:14,683+02:00;2018-03-26 08:48:14,683;9b76303b-0528-4a43-8894-95fe5bdfd116;(null);WorkerStartup 1;;Spotfire.Dxp.Worker.Host.WorkerHost;"Failed to start worker because the Spotfire Server could not be reached.
Spotfire.Dxp.Services.ManifestReader+ManifestWebException: Could not connect to server 'https://serveradress:9443/' to download manifest. The request was aborted: Could not create SSL/TLS secure channel (SecureFailure). Contact the administrator to make sure that the SSL certificate has been installed. ---> System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel (SecureFailure). Contact the administrator to make sure that the SSL certificate has been installed.

Related Knowledge base articles:
https://support.tibco.com/s/article/SSL-Ciphers-used-for-the-Spotfire-backend-connector-9443
https://support.tibco.com/s/article/Configure-cipher-suites-used-for-backend-trust-in-Spotfire-10-0