Related Tips & Info
Wikis - Page

Install fails with the Microsoft JDBC v10.2 driver

alekz
 
1 Likes

In v10.2 of the Microsoft JDBC driver for Microsoft SQL Server, TLS encryption is enabled by default.

This means that the JDBC driver will attempt to use TLS when connecting to the SQL Server and if TLS is enabled on the server with a self-signed certificate then the IG installation will fail because the certificate can't be verified by the installer.

The workaround is to use an older version of the JDBC driver, e.g. v9.4 so the install completes.

Afterwards you can switch to a newer driver (after trusting the server certificate) or you may also change the JDBC URL if you want to disable TLS encryption with a newer driver.

Labels:

Support Tips/Knowledge Docs
Comment List
  • in reply to gogga

    Hi Steven, 

    did you get past this issue for the JDBC collectors? we are facing the same with IG 3.7.3 for the JDBC collectors for both SQL and Oracle. any idea how to configure the collectors to trust the certificates? 

  • in reply to Steve Williams 

    Hi Steven

    This is true for the installer, but if you want to connect to a MS SQL servers via the JDBC fulfillment connector, it still gives the certification error:
    Unable to connect to your server: DaaS connector returned error (486): Target connection failure: SQLException Error The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

    At the moment struggling to get past this issue.

  •  

    Hello,

       This is no longer the case with Identity Governance 3.7.3 that was released on 02-Dec-20222.  The JDBC URLs have been updated to include encrypt=false by default (including the connection during the installation). 


    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    Micro Focus 

     

Related
Recommended

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.