KBI 311692 ODBC Connection Failure After Enabling TLS v1.2 And Disabling TLS v1.0
Version
Argent Job Scheduler – All Versions
Date
Tuesday, 24 July 2018
Summary
Argent Job Scheduler has issues while connecting to SQL Server database after enabling TLS v1.2 And Disabling TLS v1.0
Technical Background
Customers are compelled to upgrade to TLS 1.2 for secure communication because of many security vulnerabilities that has been reported against SSL and earlier versions of Transport Layer Security (TLS)
Because of this, Customers has to turn off TLS v1.0 and allows only TLS v1.2 in order to comply with PCI
Microsoft itself has reported that this action can cause several issues with most of the applications
Argent Job Scheduler uses ODBC for database connectivity
If the ODBC driver used for creating the DSN is ‘SQL Server’, then Argent Job Scheduler will have issue connecting to the database because ODBC driver ‘SQL Server’ won’t support TLS v1.2
The ODBC drivers supporting TLS v1.2 are ‘ODBC Driver 11 for SQL Server’ and later
For details see TLS 1.2 support for Microsoft SQL Server
Use ‘ODBC Data Source Administrator’ (32 bit or 64 bit depending on the Argent Job Scheduler installation) in Control Panel to find out installed ODBC driver for SQL Server
Latest ODBC drivers for SQL Server can be downloaded from download.microsoft.com
For example, ODBC Driver 13 for SQL Server can be downloaded from
https://www.microsoft.com/en-us/download/details.aspx?id=50420
Resolution
To avoid issues due to this TLS upgrade, during fresh installation of Argent Job Scheduler, select the ODBC Driver 11 for SQL Server or later, before creating the new System Data Source
For customer who has Argent Job Scheduler already installed but need to turn on TLS v1.2, he should create a new System DSN with ODBC Driver 11 for SQL Server or later
The new System DSN created should be identical to the existing DSN for Argent Job Scheduler, except for the ODBC Driver
The Argent Job Scheduler should be updated with the new DSN from the ODBC Setup button available under the ‘System Options’ tab in ‘Configuration Options’ screen
Restart the Argent Job Scheduler service and it is ready to work with TLS v1.2