After the installation of KB3172605 (different from previously known updates that cause issues) on our Windows 7 machines, CPS no longer works.
Error: "SecurityNegotiationException: Could not establish secure channel for SSL/TLS with authority"
After removal of the update and a restart, CPS works again.
The workaround GE has sent to everyone regarding the server updates will probably resolve this issue. I will do further testing this evening to see if this GE patch resolves this issue globally.
July 21, 2016 — KB3172605
This update includes quality improvements. No new operating system features are being introduced and no new security updates are included. Key changes include:Improved support in Microsoft Cryptographic Application Programming Interface (CryptoAPI) to help identify websites that use Secure Hash Algorithm 1 (SHA-1).
Addressed issue in Microsoft Secure Channel (SChannel) that sometime causes Transport Layer Security (TLS) 1.2 connections to fail depending on whether the root certificate is configured as part of the certificate chain for server authentication.
That (and other) updates were applied on Saturday to our Test environment with no problems. I had previously implemented the suggested jBoss change for TLS.
Steve
Yes try the TLS JBOSS change GE sent out. That should take care of the issue. If not please post back.
What was the change GE sent out?
Thanks,
Carolyn