"The request was aborted: Could not create SSL/TLS secure channel" after installing Windows Updates

KB ID: 2164
Products: Veeam Backup & Replication
Version: All
Published:
Last Modified: 2016-10-28

Challenge

After installing the security Windows Updates released in September or October 2016, outgoing HTTPS connections from Veeam server to vCenter and NetApp storages may fail with

The request was aborted: Could not create SSL/TLS secure channel.

Any other HTTPS connections may be affected as well.

 

Cause

After installing one or more of the following security updates:

2012 R2 and Windows 8
KB3185331
KB3188743
KB3174644
 
2008 R2 and Windows 7
KB3185278
KB3185330
KB3192391
KB3175024

KB3172605

If the public key length is shorter than 2048 bytes (e.g. RSA 512), Windows may cancel the HTTPS connection. 

Solution

To fully resolve the problem, regenerate vCenter or NetApp certificates so that the public key length is at least 2048 bit.
Please note that KB3172605 update causes issues with SHA-1 certificates even with the longer public key. For that one, you may want to generate the SHA-2 certificate.

As a workaround you can uninstall the updates if you have them installed.

More Information

Microsoft Security Bulletin Summary for September 2016  https://technet.microsoft.com/en-us/library/security/ms16-sep.aspx
5 / 5 (26 votes cast)

Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Orphus system