Failure to connect to Password Manager server from DMZ host (230439)

When attempting to install the PMUser site or PMHelpdesk site on a DMZ (standalone) server, it fails to connect to the Password Manager server.

The port tests fine using Telnet (default port 8081) and there are no firewalls in place.

Issue with TLS while using the Built-In certificate option.

Defect ID 704405

STATUS

This will be resolved in a future version of Password Manager.

WORKAROUND

Option 1 - Use a Custom certificate

Option 2 - Disable TLS on the standalone/DMZ host

To disable TLS do the following or apply the attached .REG file:

Automated method:

1. Rename the attached file DisableTLS.reg.RENAME to DisableTLS.reg
2. Double-Click DisableTLS.reg on the standalone/DMZ server
3. After the registry file has been applied, reboot the server
4. Configure and connect the PMUser site

Manual method:

1. Open the Registry editor on the standalone/DMZ host
2. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols
3. Create the following two Keys if they do not exist, under Protocols
   TLS 1.1
   TLS 1.2
4. Create the following two Keys under both TLS 1.1 and TLS 1.2:
   Client
   Server
5. Create the following DWORDs under both the Client and Server Keys for both TLS 1.1 and TLS 1.:
   DisabledByDefault
   Enabled
6. Under both Client and Server set the following
   DisabledByDefault=1
   Enabled =0
7. Reboot the server
8. Configure and connect the PMUser site

See screen shot for example.