SSL Socket Connection Error with RSA Authentication Agent versions 7.3.1 [48] through 7.3.2 [80] and Authentication Manager 8.4 +
Originally Published: 2019-11-25
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.
RSA Authentication Agent: versions 7.3.1 [48] through 7.3.2 [80]
Issue
"RSA Authentication Agent versions 7.3.1 [48] through 7.3.2 [80] were linked with a BSAFE version where the TLS 1.2 handshake was broken but still worked by negotiating down to TLS 1.1"
Authentication Manager 8.4 and higher uses only TLS 1.2.
SSL Socket Connection Errors can be seen in the System Activity Monitor or by running a System Log Report via the Security Console.
| 2019-11-25 14:58:56 | WARN | 26246 | SSL Socket Connection Error | SSL handshake exception occurred with the remote host “Agent IP Address” communicating over the SSL channel:“No shared ciphers for protocol” | Warning | Remote client communicates over unsupported SSL/TLS channel. | SYSTEM |
Resolution
| Upgrade your Windows agents to the latest version; that is, an agent later than 7.3.2 [85] for this particular problem. |
Notes
| https://community.rsa.com/docs/DOC-95921 |
Related Articles
User groups 11Number of Views SSL socket connection error with RSA Authentication Agent for Windows 7.3.1 [48] through 7.3.2 [80] and Authentication Man… 129Number of Views Map a RADIUS User Attribute Definition to an Identity Source Attribute 12Number of Views Assign and Distribute a Software Token to a User Using File-Based Distribution in the User Dashboard 28Number of Views Cloud Administration Delete User Device API 9Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process How to Update the Root (Server) and Client Certificates in RSA Identity Governance & Lifecycle RSA Authenticator 6.2.2 for Windows Administrator Guide RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?