Return
-
Title
"TLSv1 was negotiated. Please update server and client to use TLSv1.2 at minimum." errors spamming FglAM log file -
Description
FglAM (Foglight Agent Manager) log files are being spammed with messages similar to the following:
ECHO <com.microsoft.sqlserver.jdbc.TDSChannel> WARN [ConnectionManagementThread-[MSSQLPool-HOSTNAME\INSTANCENAME]-[][MSSQLProfile{host='HOSTNAME', instance= 'INSTANCENAME', username='DOMAIN\USERNAME', authType= 'WINDOWS_CUSTOM', port= '0' useNTLMv2= 'true', socketTimeout= '900', database= 'master', secureConnection= 'OFF', packetSize= '0', ApplicationIntent= 'NONE', enforceSSLVersion= 'NONE', lockTimeout= '10000', codePageOverride = '', selectMethod='' }]] com.quest.glue.core.util.JavaLoggingToQuestBridge - TLSv1 was negotiated. Please update server and client to use TLSv1.2 at minimum. -
Cause
FglAM server and monitored host servers should both be configured to allow for TLSv1.2 use. -
Resolution
Both the Foglight Agent Manager and the monitored host server
Enable TLS v1.2 protocol on the Agent Manager Windows server as described in Knowledgebase article 4310066 .
SQL Server instance on the monitored host
Apply critical updates to the SQL Server instances as per Microsoft Knowledgebase article KB3135244 .
Note: SQL Server 2005 instances cannot be updated to accept TLS v1.2 connections.