How to make CA Automation Point communicate with the Remote Notification Manager MS SQL Server database via TLS 1.2?

Document ID : KB000014244
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

How to make CA Automation Point communicate with the Remote Notification Manager MS SQL Server database via TLS 1.2?

Environment:
MS Windows Server and MS SQL Server
Answer:

Follow these steps:

1) Disable the older compromised protocols in MS Windows registry of your MS SQL Server DB machine, by setting the following values:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server] "Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server] "Enabled"=dword:00000000

2) Enable TLS 1.2 in MS Windows registry of both the CA Automation Point and the MS SQL Server DB machine by setting following values (the Server value is necessary only for the DB server):
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "Enabled"=dword:00000001

3) Make sure that your version of MS SQL Server supports TLS 1.2 communication. List of versions required are in following article: https://support.microsoft.com/en-sg/help/3135244/tls-1.2-support-for-microsoft-sql-server , please see the table in the section “How to know whether you need this update” to see if your version supports TLS 1.2 and update if you need to.

4) If you use MS SQL Server 2012 download and install "Microsoft SQL Server 2012 Native Client - QFE" on your CA Automation Point machine, download link is available inside the Microsoft support article linked in step 3. If you use MS SQL Server 2008, you have to download a correct version of “Microsoft SQL Server 2008 Native Client”.

Additional Information:

You can find additional information at our website: CA Technologies Documentation