Voltar
-
Título
Cannot enable SSL for SQL PI connection on mixed Windows 2012 and Windows 2019 environment -
Descrição
Cannot configure SQL PI using SSL on a Windows 2019 or Windows 2016 server where the Foglight Agent Manager is using Windows 2012.
Failed to enable SQL PI monitoring extension for SQL Agent AGENTNAME.
Issue occurs for every SQL Server instance.
Failed to establish connection to the SQL PI repository.The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "SQL Server did not return a response. The connection has been closed. ClientConnectionId:a4cc6b4a-3f76-4d95-816e-7293e41d1bcb". -
Causa
CAUSE 1
Issue was caused by the following override in baseline.jvm.config. This is not necessary for JDK above 1.6.-Dcom.sun.net.ssl.enableECC=falseCAUSE 2
Incompatibility issues in the OS connectivity when trying to enable a FglAM server on Windows 2012 for SQL Server agents to a PI FglAM running on Windows 2019 due to TLS connectivity.
-
Resolução
RESOLUTION 1
- Stop the Foglight Agent Manager
- Navigate to the following directory on the Foglight Agent Manager: {fglam}\state\default\config
- Edit the file baseline.jvmargs.config
- Comment out (with a #) or remove any override that looked exactly like the following (where X is any number) by
vmparameter.X = "-Dcom.sun.net.ssl.enableECC=false"; - Save the file
- Start the Foglight Agent Manager
- Retry enabling the SQL PI extension on the database agent
RESOLUTION 2Upgrade the Operating systems on Windows 2012 and Windows 2012 R2 servers of the Foglight Agent Manager servers to Windows 2019 to be compatible with each other.