Return
-
Title
"The SQL Server login requires an SSL connection" error when adding a SQL Server instance -
Description
The following error appeared when a SQL Server agent is added to Foglight even if SSL is enabled
"The connection to the instance failed. [Foglight][SQLServer JDBC Driver]The SQL Server login requires an SSL connection.- Profile:MSSQLProfile{host='SERVERNAME.HOSTNAME.COM', instance= 'DEFAULT_INSTANCE', username='USERNAME', authType= 'WINDOWS_CUSTOM', port= '0' useNTLMv2= 'false', socketTimeout= '900', secureConnection= 'OFF' }."
-
Resolution
This is the "BEAST" specific security issue noted here: http://support.microsoft.com/kb/2653857For our next steps we suggest two options to enable monitoring to work:1) If SSL is enabled on the SQL Server host, apply Cumulative update package 3 for SQL Server 2008 SP3 - https://support.microsoft.com/en-us/kb/2648098, ensure a post update reboot occurs and then we can try using the SSL manditory or required setting againor2) Disable SSL Forced Encryption on the MSSQL server (this probably may not be an option), restart the MSSQL server and then using the SSL connection turned off in the agent.
3) In addition, the user can run the following query from SQL Server Management Studio to see if there are any encrypted connections on the SQL Server as well. If 0 is returned, it is most likely that the setting for “Force Encryption” is “No”.SELECT count (encrypt_option)FROM sys.dm_exec_connectionsWHERE encrypt_option = 'TRUE'1. Remote Desktop to your SQL Server host2. Open SQL Server Configuration Manager3. Expand SQL Server Network Configuration section and right-click on the Protocols for <instance name> and select Properties4. Force Encryption is under Flags tab (No by default)5. If it is set to No, then we will need to set the SSL Connection in Foglight’s Agent Status Properties of the agent to OFF
Please, click on Database dashboard | select the instance | Settings | Administration | Connection Details | set the SSL connection to "OFF, Mandatory, Optional" based on your preference | click on Set | click on Validate Connectivity | click on the Save Changes button. -
Additional Information
If the user encounters ERROR: "SSL handshake failed: Unsupported curveId: 29" when adding a SQL Server instance Please, look at Knowledge Article 232748.