I am Unable to provision Secure Store Service Application for SharePoint 2013. I get TLS related error. Below is the error:

Logging unknown/unexpected client side exception: SecurityNegotiationException. This will cause this application server to be removed from the load balancer queue. Exception: System.ServiceModel.Security.SecurityNegotiationException: Could not establish secure channel for SSL/TLS with authority 'sm000000:32844'. ---> System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel. at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context) at System.Net.HttpWebRequest.GetRequestStream() at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream() --- End of inner exception stack trace --- Server stack trace: at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream() at System.Serv... f968df9e-3ece-009d-d25e-28f479736e4a

  • Have you validated your TLS config? Turn on CAPI2 logs in Windows Event Viewer and try to recreate the error you should get more information about the nature of the issue. But it looks like one of the components is not configured for TLS (or miscofigured) – Marek Sarad Jun 18 '19 at 11:38
  • I have enabled CAPI2 logs. Below is the log I am getting: – Dharam Padia Jun 24 '19 at 11:16
  • A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. – Dharam Padia Jun 24 '19 at 11:16
  • Try exporting root and adding it to trusted root on the servers. – Marek Sarad Jun 27 '19 at 7:50
  • It is already there. – Dharam Padia Jul 22 '19 at 10:59

There a blog about configuring Secure Store Service Application, you can check it with your steps.
How To Configure Secure Store Service Application In SharePoint

If this issue still exists, you could provide your steps to analysis this issue further.

| improve this answer | |
  • I have followed steps in the article mentioned by you but still I am facing the same issue. – Dharam Padia Jun 24 '19 at 11:17

I was able to resolve this issue by enableing SharePoint support for TLS 1.1 and 1.2 by following Enable TLS and SSL support in SharePoint 2013 article.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.