SSL enabled database mails in error

Question

Hi am trying enable the SSL as bellow in SQL server 2016 sp2 EE database mails . How ever when I enabled emails will not delivered. When disabled emails are working fine. .net framwork install 4 and above. Any one has experience is and any resolution ?

Answer 1

Hi @Ashwan ，

What are the error you get? Please check your error log.
Your question may have something to do with TLS. I found a similar case and discussion by others: https://dba.stackexchange.com/questions/213608/enable-tls-1-2-for-sql-server-2016-database-mail
Perhaps the 2 new registry settings here can fix your problem:

Windows Registry Editor Version 5.00  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]  
"SchUseStrongCrypto"=dword:00000001  
   
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319]  
"SchUseStrongCrypto"=dword:00000001   

And if you enable TLS 1.2 for SQL Server communication, the following registry you should set correctly:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]   
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "DisabledByDefault"=dword:00000000 "Enabled"=dword:00000001   
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "DisabledByDefault"=dword:00000000 "Enabled"=dword:00000001    

https://support.microsoft.com/en-us/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe

Answer 2

hi Yufeishao-msft
Thank you for the valued comment
In my server has no entries related to "SchUseStrongCrypto"=dword:00000001/ "SchUseStrongCrypto"=dword:00000001 . is that good to edit regedit ?