Error 'The request was aborted: Could not create SSL/TLS secure channel' while installing Prisma Cloud Host Defender on Windows Server

Error 'The request was aborted: Could not create SSL/TLS secure channel' while installing Prisma Cloud Host Defender on Windows Server

9325
Created On 11/05/23 13:19 PM - Last Modified 11/09/23 08:13 AM


Symptom


  • Error 'The request was aborted: Could not create SSL/TLS secure channel' while installing Prisma Cloud Host Defender on Windows Server
Invoke-WebRequest : The request was aborted: Could not create SSL/TLS secure channel.
At line:1 char:1988
+ ... t.SecurityProtocolType]::Tls12; Invoke-WebRequest @parameters; .\defe ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException
+ FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand
.\defender.ps1 : The term '.\defender.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:2019
+ ... olType]::Tls12; Invoke-WebRequest @parameters; .\defender.ps1 -type s ...
+ ~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (.\defender.ps1:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException 


Environment


  • Prisma Cloud
  • Windows Server 


Cause


Common causes include:
  • The SSL Cipher Suite Order is not updated
  • System Hardening is performed to limit the number of Cipher Suites on the Server
  • The default set of Cipher Suites supported on the Server have been modified


Resolution


1. Use nmap to confirm the Cipher Suites supported by the Console : Validate Console’s TLS cipher suites

Note: Use port 443 for SAAS based Console (example below) and port 8083 (default) for Self-Hosted Console



2. Enable the SSL Cipher Suite Order on the Windows Server:
  • Open Run Prompt and run gpedit.msc
  • Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Network > SSL Configuration Settings
  1. Open SSL Cipher Suite Order
  2. Select Enabled
  3. Paste the supported list of SSL Cipher Suites (shown below in 9) into the text box (ensure there are no spaces)
  4. Click Ok & Apply
  5. Restart the Server
Screenshot 2023-11-05 at 10.33.55 PM.png


Additional Information




Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008Vl8CAE&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language