Error 'The request was aborted: Could not create SSL/TLS secure channel' while installing Prisma Cloud Host Defender on Windows Server
9323
Created On 11/05/23 13:19 PM - Last Modified 11/09/23 08:13 AM
Symptom
- Error 'The request was aborted: Could not create SSL/TLS secure channel' while installing Prisma Cloud Host Defender on Windows Server
Invoke-WebRequest : The request was aborted: Could not create SSL/TLS secure channel. At line:1 char:1988 + ... t.SecurityProtocolType]::Tls12; Invoke-WebRequest @parameters; .\defe ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand .\defender.ps1 : The term '.\defender.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:2019 + ... olType]::Tls12; Invoke-WebRequest @parameters; .\defender.ps1 -type s ... + ~~~~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (.\defender.ps1:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException
Environment
- Prisma Cloud
- Windows Server
Cause
Common causes include:
- The SSL Cipher Suite Order is not updated
- System Hardening is performed to limit the number of Cipher Suites on the Server
- The default set of Cipher Suites supported on the Server have been modified
Resolution
1. Use nmap to confirm the Cipher Suites supported by the Console : Validate Console’s TLS cipher suites
Note: Use port 443 for SAAS based Console (example below) and port 8083 (default) for Self-Hosted Console
2. Enable the SSL Cipher Suite Order on the Windows Server:
- Open Run Prompt and run gpedit.msc
- Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Network > SSL Configuration Settings
- Open SSL Cipher Suite Order
- Select Enabled
- Paste the supported list of SSL Cipher Suites (shown below in 9) into the text box (ensure there are no spaces)
- Click Ok & Apply
- Restart the Server