Schannel error Event 36887 A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 48

Question

Hello,

One of my DC's is getting this error 4 times per minute. It still is a server 2012r2 and I am in the process of migrating to server 2022. Can I ignore this error or do I need to fix it first before migrating?

If I need to fix it first, how should I approach this? I can't find a lot of information about this particular error or how to fix it. I already checked if the root certificate was present and it was.

Answer 1

Hi Jorin van Mourik,

Thank you for posting in the Microsoft Community Forums.

Since you have already performed the migration operation on the environment, we do not recommend making changes to the environment during the migration, and if the new server (server 2022) reports errors after the migration is complete, you only need to deal with them according to the errors that appear in the new server.

You should check if there are any validation issues with the certificates in the AD environment, if there are no issues with the certificate validation in the environment, you can ignore them.

Note that to change the permissions of a folder, you must have the appropriate permissions, such as an administrator or a user with modify permissions.

For the error "The TLS protocol defined fatal alert code is 48", there is the following reference link.

SSL/TLS Alert Protocol & the Alert Codes | Microsoft Learn

Best regards

Neuvi Jiang