https://login.veeam.com/en/oauth?client_id=nXojRrypJ8&redirect_uri=https%3A%2F%2Fwww.veeam.com%2Fservices%2Fauthentication%2Fredirect_url&response_type=code&scope=profile&state=eyJmaW5hbFJlZGlyZWN0TG9jYXRpb24iOiJodHRwczovL3d3dy52ZWVhbS5jb20va2IyMTY0IiwiaGFzaCI6Ijk1OGFlOWU2LTg1ZjgtNGJiZS1iM2YzLWY3ZDVlYzI0N2NjMSJ9
"The request was aborted: Could not create SSL/TLS secure channel" after installing Windows Updates
| KB ID: | 2164 |
| Product: | Veeam Backup & Replication |
| Version: | All |
| Published: | 2016-09-27 |
| Last Modified: | 2020-08-13 |
| Languages: | FR |
Challenge
After installing the security Windows Updates released in September or October 2016, outgoing HTTPS connections from Veeam server to vCenter and NetApp storages may fail with
The request was aborted: Could not create SSL/TLS secure channel.
Any other HTTPS connections may be affected as well.
The request was aborted: Could not create SSL/TLS secure channel.
Any other HTTPS connections may be affected as well.
Cause
After installing one or more of the following security updates:
2012 R2 and Windows 8
KB3185331
KB3188743
KB3174644
2008 R2 and Windows 7
KB3185278
KB3185330
KB3192391
KB3175024
KB3172605
Please note that Windows Monthly Quality Rollups may replace the aforementioned updates. For more information consult Microsoft Update Catalog.
If the public key length is shorter than 2048 bytes (e.g. RSA 512), Windows may cancel the HTTPS connection.
2012 R2 and Windows 8
KB3185331
KB3188743
KB3174644
2008 R2 and Windows 7
KB3185278
KB3185330
KB3192391
KB3175024
KB3172605
Please note that Windows Monthly Quality Rollups may replace the aforementioned updates. For more information consult Microsoft Update Catalog.
If the public key length is shorter than 2048 bytes (e.g. RSA 512), Windows may cancel the HTTPS connection.
Solution
To fully resolve the problem, regenerate vCenter or NetApp certificates so that the public key length is at least 2048 bit.
Please note that KB3172605 update causes issues with SHA-1 certificates even with the longer public key. For that one, you may want to generate the SHA-2 certificate.
As a workaround, you can uninstall the updates if you have them installed.
Please note that KB3172605 update causes issues with SHA-1 certificates even with the longer public key. For that one, you may want to generate the SHA-2 certificate.
As a workaround, you can uninstall the updates if you have them installed.
More information
Microsoft Security Bulletin Summary for September 2016 https://technet.microsoft.com/en-us/library/security/ms16-sep.aspx
Vmware docs: Create Self-Signed Certificates
NetApp docs: security certificate create
Vmware docs: Create Self-Signed Certificates
NetApp docs: security certificate create
| KB ID: | 2164 |
| Product: | Veeam Backup & Replication |
| Version: | All |
| Published: | 2016-09-27 |
| Last Modified: | 2020-08-13 |
| Languages: | FR |
Couldn't find what you were looking for?
Below you can submit an idea for a new knowledge base article.
Report a typo on this page:
Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!
Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!
Spelling error in text
Knowledge base content request
