SSL TLS Version issue in BigQuery Linked Service in ADF

Question

Hi All,

I am creating a Linked Service to connect to BigQuery with Service Account authentication and p12 file has already been placed in IR VM directory.

Receiving following error:
ERROR [HY000] [Microsoft][DriverSupport] (1160) Cannot enable SSL for the connection when connecting to a server that has not enabled SSL. If the server has SSL enabled, please check if it has been configured to use a SSL protocol version that is lower than what is allowed for the connection. The minimum SSL protocol version allowed for the connection is: TLS 1.2.

But when i place p12 file in another IR VM, linked service is working correctly.

Tried to check TLS version in both VM's and everything looks same.

Please suggest ways to check SSL and TLS version in VM's and how to resolve this issue.

Answer 1

Hey,
Based on the error message it seems the issue might be w.r.t SSL certificate so 1st step would be to compare the SSL/TLS across both the servers. and links provided by @ShaikMaheer-MSFT would help in that

In case if they are same, would suggest to monitor the traffic across both the server when trying to access GCP Big Query.
You might get the exact cause of failure which can be like :

1. Firewall blockage
2. some missing set up like Big query need Google_base set up as a signature
   etc.

Answer 2

Hi @Priya Jha ,

Thank you for posting query in Microsoft Q&A Platform.

From the error message it seems your failure server either has SSL not enabled or TLS version is lower then 1.2

Kindly check below link to know is TLS 1.2 enabled on server.
https://www.waco-texas.com/userfiles/cms-water/file/how_to_change_TLS_settings.pdf

To enable SSL on server kindly check below link.
https://www.ionos.com/help/ssl-certificates/setting-up-user-managed-ssl-certificates/installing-an-ssl-certificate-on-a-windows-server/

Kindly cross check above between your working server and failure server too.

Please let us know how it goes. Thank you.