Invoke-WebRequest -URi "https://gbl.his.arc.azure.com/log" -Metho

Lucas_Daneil_Lewis 1

Some Azure Arc Enabled Servers become offline from Connected status. So I run to disconnect these servers with this cmd "azcmagent disconnect" and then I tried to onboard these servers.
But it shows the error like this. Please see the below photo.

Remark: Issue servers are VMs hosted on Esxi. OS: Windows Server 2019 Standard.

Maxim Sergeev 6,571 Reputation points Microsoft Employee

2022-08-29T17:40:25.747+00:00
Hi @Lucas_Daneil_Lewis ,

It seems your server isn't configured to work on tls 1.2 by default. Please follow the recommendations

https://learn.microsoft.com/en-us/azure/azure-arc/servers/network-requirements?tabs=azure-cloud#transport-layer-security-12-protocol
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

Try this first (this will apply for the PS session only),

Run PowerShell as administrator.
To set TLS 1.2 for the current PowerShell session, type:

$TLS12Protocol = [System.Net.SecurityProtocolType] 'Ssl3 , Tls12' [System.Net.ServicePointManager]::SecurityProtocol = $TLS12Protocol
Lucas_Daneil_Lewis 1 Reputation point

2022-08-30T09:07:26+00:00

I checked TLS version. It's appear like that. I didn't run your cmd.
Maxim Sergeev 6,571 Reputation points Microsoft Employee

2022-08-31T17:58:59.07+00:00
Looks like your default tls is 1.0, can you follow the article?

https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392

Or you could try to run Onboardingscript.ps1 after applying

$TLS12Protocol = [System.Net.SecurityProtocolType] 'Ssl3 , Tls12' [System.Net.ServicePointManager]::SecurityProtocol = $TLS12Protocol

in the same powershell session

1 answer

Maxim Sergeev 6,571 Reputation points Microsoft Employee

2022-09-04T02:43:44.223+00:00
Looks like your default tls is 1.0, can you follow the article?

https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392

Or you could try to run Onboardingscript.ps1 after applying

$TLS12Protocol = [System.Net.SecurityProtocolType] 'Ssl3 , Tls12' [System.Net.ServicePointManager]::SecurityProtocol = $TLS12Protocol

in the same powershell session
Please don't hesitate to mark the post as answered if it is. This helps us and our community.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Invoke-WebRequest -URi "https://gbl.his.arc.azure.com/log" -Metho

1 answer

Your answer