During CA Asset Portfolio Management 14.1 C4 upgrade, the postinstall steps errors with: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption.

Document ID : KB000008470
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

Our environment is configured for SSL with TLS1.2 enabled (TLS 1.1 disabled).  The CA Asset Portfolio Management 14.1, cumulative 4 patch fails: 


09-27,09:11:03 INFO - MDBTools_0101I - Command: install database schema from driver file. 
09-27,09:11:03 INFO - MDBTools_0110I - As user: uapmadmin. 
09-27,09:11:03 INFO - MDBTools_0112I - For vendor: mssql. 
Sep 27, 2017 9:11:06 AM com.microsoft.sqlserver.jdbc.TDSChannel enableSSL 
WARNING: TDSChannel ( ConnectionID:1 TransactionID:0x0000000000000000) SSL handshake failed: SQL Server did not return a response. The connection has been closed. 
Sep 27, 2017 9:11:06 AM com.microsoft.sqlserver.jdbc.TDSChannel enableSSL 
WARNING: TDSChannel ( ConnectionID:2 TransactionID:0x0000000000000000) SSL handshake failed: SQL Server did not return a response. The connection has been closed. 
09-27,09:11:06 INFO - Url: jdbc:sqlserver://dwsbd003:1433;DatabaseName=mdb 
09-27,09:11:06 INFO - User: uapmadmin 
09-27,09:11:06 INFO - ErrorCode: 0 
09-27,09:11:06 ERROR - The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: SQL Server did not return a response. The connection has been closed.. 
09-27,09:11:06 INFO - MDBTools_0104I - Total time: 0H:0M:2S. 
09-27,09:11:07 MDBTools install error=3 
09-27,09:11:07 Setupmdb exit /B return code=3

Environment:
CA Asset Portfolio Management 14.1
Resolution:

Steps to resolve: 

1. Disable TLS 1.2. Run the MDB Command defined in the patch readme file.

2. After confirming the successful upgrade, enable TLS 1.2 again. 

3. Steps to disable/enable TLS are located here: 

https://blogs.msdn.microsoft.com/friis/2016/07/25/disabling-tls-1-0-on-your-windows-2008-r2-server-just-because-you-still-have-one/