Troubleshooting: Symantec VIP Test Fails with "Could Not Create SSL/TLS Secure Channel" – SecureAuth Support

Version Affected: All

Overview

After configuring a Symantec VIP multi-factor method and clicking Test, the error The request was aborted. Could not create SSL/TLS secure channel. may be displayed.

The Symantec VIP Settings section on the Multi-Factor Methods tab, with the SSL/TLS secure channel error shown below the Issued Cert SN field and Test button.

Cause

The local Network Service and SecureAuth0 Application Pool accounts have not been granted Private Key permissions on the certificate issued by Symantec.

Resolution:

Grant the local Network Service account and the IIS AppPool\SecureAuth0Pool account Read permission to the private key of the certificate issued by Symantec, using the Windows Certificate Manager's Manage Private Keys option.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.