-
Título
SSL Certificate chain issue with database -
Descrição
There is an issue when setting up a fresh installation of Active Roles 8.2.1. Database configuration works and tables are created on the SQL server. However, administration service will not start. The following appears logged:
Event ID 2512:
Connection to database has been lost.
Active Roles Administration Service has lost connection to Configuration database. Administration Service is making attempts to connect to database. Details: Unspecified error
Database: ARS_AdminService
SQL Server: Server\LocalAccount
Event ID 2501:
Critical error occurred upon starting Active Roles Administration Service. Details: Database 'ARS_AdminService' on SQL Server 'Server\LocalAccountL' is unavailable. SSL Provider: The certificate chain was issued by an authority that is not trusted. -
Resolução
STATUS
Active Roles 8.2.1 uses Microsoft OLE DB Driver 19.x for SQL Server. OLE DB Driver 19.x requires SSL to be configured in the SQL Server, please click here for further details.
WORKAROUND
Active Roles 8.2.0 still supports earlier OLE DB Driver versions, so a quick fix will be to:
1.- Install OLE DB Driver 18.x on the Active Roles service host, for instance 18.4.0.0. If it is already installed, then you can skip this step.
2.- Open regedit on the Active Roles service host and set MSOLEDBSQL in these keys:
HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Active Roles\Configuration\Service\CHDatabaseConnectionString
HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Active Roles\Configuration\Service\DatabaseConnectionString
NOTE: You must change it in both keys:
