SSL Socket Connection Error with RSA Authentication Agent versions 7.3.1 [48] through 7.3.2 [80] and Authentication Manager 8.4 +
Originally Published: 2019-11-25
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.
RSA Authentication Agent: versions 7.3.1 [48] through 7.3.2 [80]
Issue
"RSA Authentication Agent versions 7.3.1 [48] through 7.3.2 [80] were linked with a BSAFE version where the TLS 1.2 handshake was broken but still worked by negotiating down to TLS 1.1"
Authentication Manager 8.4 and higher uses only TLS 1.2.
SSL Socket Connection Errors can be seen in the System Activity Monitor or by running a System Log Report via the Security Console.
| 2019-11-25 14:58:56 | WARN | 26246 | SSL Socket Connection Error | SSL handshake exception occurred with the remote host “Agent IP Address” communicating over the SSL channel:“No shared ciphers for protocol” | Warning | Remote client communicates over unsupported SSL/TLS channel. | SYSTEM |
Resolution
| Upgrade your Windows agents to the latest version; that is, an agent later than 7.3.2 [85] for this particular problem. |
Notes
| https://community.rsa.com/docs/DOC-95921 |
Related Articles
SSL socket connection error with RSA Authentication Agent for Windows 7.3.1 [48] through 7.3.2 [80] and Authentication Man… 129Number of Views User groups 12Number of Views Assign and Distribute a Software Token to a User Using File-Based Distribution in the User Dashboard 30Number of Views Cloud Administration Delete User Device API 9Number of Views Real time system log monitor shows error handling OA request: No shared ciphers for protocol after upgrading to RSA Authen… 144Number of Views
Trending Articles
Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Release Notes: Cloud Access Service and Authenticators RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device
Don't see what you're looking for?