Symptom
HANA hdblcm update is failing with enabled TLS13 enforcement
SAP HANA Lifecycle Management - SAP HANA Database 2.00.086.00.1751264911
************************************************************************
Scanning software locations...
Detected components:
SAP HANA Database (2.00.086.00.1751264911) in /nfs-share/1-SAP_InstallMedia/Support_Packages_+_Patches/HANA2/DATABASE_2.0/IMDB_SERVER20_086_0-80002031/SAP_HANA_DATABASE/server
SAP HANA Local Secure Store (2.086.00) in /nfs-share/1-SAP_InstallMedia/Support_Packages_+_Patches/HANA2/DATABASE_2.0/IMDB_SERVER20_086_0-80002031/SAP_HANA_DATABASE/lss/packages
Do you want to specify additional components location? (y/n) [n]:
Choose an action
Index | Action | Description
-------------------------------------------------------------------------------------------
1 | HS2 (update) | Update SAP HANA Database version 2.00.085.00.1745328351
| | hanasingle2 (Database Worker (worker))
2 | install | Install new system
3 | extract_components | Extract components
4 | print_detected_components | Print detected components
5 | Exit (do nothing) |
Enter selected action index [5]: 1
Choose components to be installed or updated:
Index | Components | Description
-------------------------------------------------------------------------------------------------------------------
1 | all | All components
2 | server | Update SAP HANA Database from version 2.00.085.00.1745328351 to version 2.00.086.00.1751264911
3 | lss | Install SAP HANA Local Secure Store version 2.086.00
Enter comma-separated list of the selected indices [1]:
Enter System Database User Name [SYSTEM]:
Enter System Database User (SYSTEM) Password:
Configuration error:
Cannot establish database connection
Connect failed (code = -10709): Connection failed (RTE:[300013] SSL handshake failed: SSL error [536875120]: Unknown error, General error: 0x20001070 | SAPCRYPTOLIB | SSL_connect
SSL API error
received a fatal TLS protocol version alert message from the peer
0xa0600278 | SSL_ | ssl3_connect
received a fatal TLS protocol version alert message from the peer
0xa0600278 | SSL_ | ssl3_read_bytes
received a fatal TLS protocol version alert message from the peer
(ErrCode: 536875120) (192.168.0.79:40406 -> hanasingle2:30013))
Read more...
Environment
- SAP HANA 2.00.086
- TLS13 enabled and forced
global.ini
[communication] -> sslenforce = true
[communication] -> sslmaxprotocolversion = tls13
[communication] -> sslminprotocolversion = tls13
Product
Keywords
SAP HANA Lifecycle Management hdblcm tls tls13 tls1.3 tlsv13 tls v1.3 13 , KBA , HAN-DB-SEC , SAP HANA Security & User Management , HAN-LM-INS-DB , Installation of HANA Database , HAN-LM-UPG-DB , Upgrade of HANA Database , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview