Foglight installer fails with "Tag mismatch!" error when using a SQL Server repository (4373144)

The Foglight installer fails with error com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "Tag mismatch!" when using a SQL Server 2019 repository on Windows Server 2019.

Foglight can be configured to disable TLSv1.3 after completing the installation.

Complete the Foglight Installation

In order to complete the Foglight installation the database creation and configuration of connection parameters will need to be completed manually.

1. Run the Foglight installer and continue until the Foglight Repository (SQL Server) screen.
2. Choose the option to Manually create the repository database.
3. Foglight Repository Initialization scripts will be placed into [FMS_HOME]\scripts\sql.
4. Run the initialization scripts via SQL Server Management Studio.
5. Cancel out of the installer; at this point the files are installed in the server, but the configuration is not complete.
6. Update [FMS_HOME]\config\server.config to with the database connection parameters:
   • server.database.host
   • server.database.port
   • server.database.name
   • server.database.user (if not using integrated authentication)
   • server.database.password (if not using integrated authentication; for password encryption refer to How to reset the Foglight remote database user password if it has been forgotten? (4232181))
   • server.database.type (set to "sqlsvr")
   • server.database.integratedauth (set to "true" if using integrated authentication)

Disable TLSv1.3 in Foglight

1. Open the file [FMS_HOME]\jre\lib\security\java.security in a text editor.
2. Ensure security.overridePropertiesFile value in the java.security file is set to true (this is usually the default value).
3. Create a file named disableUnsupportedTLS.security
4. In that file, add an entry for jdk.tls.disabledAlgorithms with the same contents as the jdk.tls.disabledAlgorithms property in java.security file.
5. Add TLSv1.3 to the list of entries on the disableUnsupportedTLS.security.
6. Add the following line to [FMS_HOME]\config\server.config, where X is either 0 or a number one greater than the previous option in the file.

   server.vm.optionX = "-Djava.security.properties=path/to/disableUnsupportedTLS.security";

7. Save the file.
8. Start Foglight.