Could not open SQL Database!

Problem:

Could not open SQL Database!

Make sure IPSClient is running.

Idealpos will now shut down.

SSL Provider: The client and server cannot communicate because they not posses a common algorithm.

---2147467259

vHefgizDhKrEDEtK6AS-9YmVai3aPsHBqg


Could not open SQL Database!

Make sure IPSClient is running.

Idealpos will now shut down.

[DBNETLIB}{ConnectionOpen (SECDoClientHandshake()).]SSL Security error.---2147467259
Aqj_m3Ec1jDqkHjUTG-LIoTqgNjope84CA

 

This can also manifest itself with the following error when attempting to access Setup > Licence Gateway:

System.ServiceModel.Security.SecurityNegotiationExceptions: Could not establish secure channel for SSL/TLS with authority 'services.idealpos.net'.

The request was aborted: Could not create SSL/TLS secure channel.

Cause:

This was identified at Cater Care (All Divisions)

They have recently done a security audit and part of that auditing program has disabled TLS 1.0 and TLS 1.1 in the registry.

The program that they are using is CYRISMA Sensor version 2.5 by Dataspotlite Inc.

Cater Care's IT Services have been requested to stop patching these servers.

Solution:

  1. Modify the registry for Client and Server under the TLS 1.0 and TLS 1.1 keys and set the Enabled REG_DWORD to 1.
    Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Serveryya9oSHp6zqxh3dt3NXDKZD4QpDtuty9cw
  2. Restart the system or restart the running SQL services

Log Entries:

These can vary, I think depending if a close suite has been performed or database maintenance or housekeeping schedule or a restart or attempted re-installation of either Idealpos or SQL.

Some entries are as follows.

 

V8

IPSError.log

20240411 04:55:48.985    2h 51m 42s   SQLOpenConnection : [DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.---2147467259
20240411 04:55:48.032 2h 51m 42s DbSupport.GetADORecordSet on Line: 124 Error: 3709 - The connection cannot be used to perform this operation. It is either closed or invalid in this context. = SELECT * FROM DatabaseMaintenancePlans 3709-The connection cannot be used to perform this operation. It is either closed or invalid in this context.

 

IPSError.log

20240411 00:02:54.417    21h 26m 45s   Error in Receive Packet Line 370 : Shared Memory Provider: No process is on the other end of the pipe.
: -2147467259
20240411 00:03:09.432 21h 27m 0s OpenIPSTerminalADO : SQL Server Network Interfaces: Error Locating Server/Instance Specified [xFFFFFFFF]. ---2147467259
20240411 00:03:09.432 21h 27m 0s OpenIPSTerminalADO : A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.---2147467259
20240411 00:03:09.432 21h 27m 0s OpenIPSTerminalADO : Login timeout expired---2147467259

 

V7

IPSError.log

20240412 10:20:23.303    0h 3m 10s   DbSupport.GetADORecordSet on Line: 112 Error: 3709 - Requested operation requires an OLE DB Session object, which is not supported by the current provider. = SELECT * FROM NETWORKPRINTERS WHERE SITE = 0 3709-Requested operation requires an OLE DB Session object, which is not supported by the current provider.
20240412 10:20:28.352    0h 3m 15s   SQLOpenConnection : [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified---2147467259  TimeTaken=0

 

The yellow highlighted lines may not be the same, I assume this is one of the first queries that is being run by Idealpos upon attempted opening.