Submit a ticketCall us
Home > Success Center > Orion Platform > Orion Platform encounters issues after disabling TLS 1.0 and TLS 1.1

Orion Platform encounters issues after disabling TLS 1.0 and TLS 1.1

Created by Alexandra.Nerpasova, last modified by Caroline Juszczak on Dec 28, 2017

Views: 627 Votes: 0 Revisions: 5

Updated December 14, 2017

Overview

When you disable TLS 1.0 and TLS 1.1 on systems running Orion Platform 2017.3 and leave only the TLS 1.2 cipher, applications in Orion stop working properly.

Environment

  • Orion Platform 2017.3

Cause 

This is a known issue caused by disabling TLS 1.0 and TLS 1.1 that is expected to be fixed in a future release of the Orion Platform. To resolve the issue before the fix, use the workaround described below.

Resolution

  1. Go to the page https://support.microsoft.com/en-us/help/3135244/tls-1-2-support-for-microsoft-sql-server (© Microsoft 2017, available at https://support.microsoft.com, obtained on December 14, 2017.)
  2. Download and install updates that are targeted to your specific SQL Server version running in your environment. For example:
    • SQL Server 2008 R2 SP3 10.50.6542.0 SQL Server 2008 R2 SP3 TLS 1.2 Update
    • Hotfix rollup 3099842 for the .NET Framework 4.5.2, 4.5.1, and 4.5 on Windows 8.1 and Windows Server 2012 R2
  3. Update the SQL native client on the primary Orion Server, any Additional Polling Engines, Additional Web Servers, and HA backups.
    1. See SQL Server Native Client (for SQL Server 2008 R2) - SQL Server Native Client (x86 and x64) (© Microsoft 2017, available at https://support.microsoft.com, obtained on December 14, 2017.) in the second table on the Microsoft web page.
    2. Download and install the native client update.

      The native client update is a part of the SQL Server 2008 R2 SP3 TLS 1.2 Update package so it is not required to install it when the SQL Server is on the same machine as the Orion Platform. For example, typical evaluation configurations.

  4. Open the SWNetPerfMon.DB file in Notepad.exe on every Orion Server. The default location is C:\Program Files (x86)\SolarWinds\Orion.
  5. At the top of the file, change the string ConnectionString=provider=SQLOLEDB.1 to ConnectionString=provider=SQLNCLI10
  6. Reboot the machine.

    Be sure to repeat the same steps for every Orion server in your environment. For example, Additional Polling Engine, Additional Web Server, HA Backups.

  7. When the process is complete, the Orion Platform should function properly with TLS 1.0 and TLS 1.1 disabled.
 

Suggested Tags:  

 

A reason for rework or Feedback from Technical Content Review:

 

 

Last modified

Tags

Classifications

Public