TLS 1.2 Connection Request - Error 36874

Question

Hi, I have a clean install of Server 2019 Standard and have worked through the various errors I was getting. However I am left with one error I cant seem to fix.

The error is:-

Error ID 36874 - An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The TLS connection request has failed.

Is it a simple case of enabling TLS 1.2 on my server? If yes, how do I do this?

Secondly, theses errors occur when there are no client PC's turned on e.g. in the early hours of the morning. Is this someone trying to connect remotely to the PC? a hacker?

or finally, should I just ignore this and worry about something else? haha

Any help or guidance would be much appreciated.

Regards,
Cliff

Answer 1

Something here may help.
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings#tls-12

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi,

If you would like to enable TLS 1.2, you could refer to DSPatrick's link or below link.
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn786418(v=ws.11)?redirectedfrom=MSDN#tls-12

If you would like to figure out which applicaiton called out the TLS 1.2 connection, you could install Network Monitor or Process Monitor for further analysis.

Network Monitor - https://www.microsoft.com/en-sg/download/details.aspx?id=4865
Process Monitor - https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Hope the information helps.

Thanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

I think with your help I might have fixed it! Well the error has not appeared in almost 20 hours.

As suggested I enabled TLS1.2 in the registry. It didn't work at first as I never added the 'DisabledByDefault' key. I read that Server 2008 needed it so I figured maybe Server 2019 needs it.

After adding that key I have not seen the error return.

Still no idea what was trying to connect to it. I ran the Process Monitor tool but this was after adding the additional key.

I will mark the answers above as 'Accepted' but will keep an eye on it for a few more days.

Thanks for all your help.

Answer 4

Glad to hear, you're welcome.

Answer 5

Unfortunately the error present itself again in the early hours of this morning.

Error 36874 Schannel An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The TLS connection request has failed.

Any more ideas on what I can try?

Regards.