Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

TLS 1.2 throws Event 36888 Schannel

Posted on 2016-08-31
3
Medium Priority
?
244 Views
Last Modified: 2016-10-16
At some customer, we have the following issue:

Situation:
Server 2012 R2 (RDS)
Internet Explorer 11

Some websites are causing system errors: Event 36888 Schannel (eg: www.tweakers.net)
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.

If we remove the tick in front of " Use TLS 1.2" in the advanced options of Internet Explorer, the error does no longer appear.

One site in particular throws has a login option which throws this error dozens of times, resulting in the website temporary being unavailable.

Removing the tick in front of "Use TLS 1.2" is not an option while it makes other websites no longer available.

What can we do to resolve this issue.
Can we resolve this ourselves, or must it be done by the owner of the website ?
0
Comment
Question by:Loyall
3 Comments
 
LVL 84

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 2000 total points
ID: 41777844
I don't believe that web site has a problem.  'tweakers.net' gets an A+ rating from SSL Labs and I don't have any trouble connecting to it with IE11 on my win 7 machine.
https://www.ssllabs.com/ssltest/analyze.html?d=tweakers.net

Maybe your 'Root Certificates' are not up to date.  https://support.microsoft.com/en-us/kb/3004394
0
 
LVL 2

Accepted Solution

by:
Loyall earned 0 total points
ID: 41780173
Hi Dave,

Thank you for your respons.
We see the problem on all 2012 R2 servers. On RDS servers, who are covered by a lot of policies, but also on other member servers, who only have a WSUS policy.
On windows 10 clients we don't see the issue appear.
So, it looks like a OS/IE problem.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Measuring Server's processing rate with a simple powershell command. The differences in processing rate also was recorded in different use-cases, when a server in free and busy states.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question