Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 308
  • Last Modified:

TLS 1.2 throws Event 36888 Schannel

At some customer, we have the following issue:

Situation:
Server 2012 R2 (RDS)
Internet Explorer 11

Some websites are causing system errors: Event 36888 Schannel (eg: www.tweakers.net)
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.

If we remove the tick in front of " Use TLS 1.2" in the advanced options of Internet Explorer, the error does no longer appear.

One site in particular throws has a login option which throws this error dozens of times, resulting in the website temporary being unavailable.

Removing the tick in front of "Use TLS 1.2" is not an option while it makes other websites no longer available.

What can we do to resolve this issue.
Can we resolve this ourselves, or must it be done by the owner of the website ?
0
Loyall
Asked:
Loyall
2 Solutions
 
Dave BaldwinFixer of ProblemsCommented:
I don't believe that web site has a problem.  'tweakers.net' gets an A+ rating from SSL Labs and I don't have any trouble connecting to it with IE11 on my win 7 machine.
https://www.ssllabs.com/ssltest/analyze.html?d=tweakers.net

Maybe your 'Root Certificates' are not up to date.  https://support.microsoft.com/en-us/kb/3004394
0
 
LoyallAuthor Commented:
Hi Dave,

Thank you for your respons.
We see the problem on all 2012 R2 servers. On RDS servers, who are covered by a lot of policies, but also on other member servers, who only have a WSUS policy.
On windows 10 clients we don't see the issue appear.
So, it looks like a OS/IE problem.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now