Skip to content

Troubleshooting -
TLS 1.2 is not configured for WinHTTP

In extremely rare cases, the error described under TLS 1.2 is not activated for the .NET Framework still occurs. In these cases, additional entries are needed in the registry of the respective server.

The log files of the APM Server and APM Robot contain the following error message:

Reason: An error occurred while making the HTTP request to https://##########/ControlCenterServer/AgentServerServices.svc. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server. The underlying connection was closed: An unexpected error occurred on a send.

For more information, refer to the documentation Update Windows and WinHTTP, Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows, and WINHTTP TLS 1.2.

Adjusting the registry values of the server

To set the required values in the registry and activate TLS 1.2 for WinHTTP, copy the following text to a file with the format .REG and save it on the server.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
      "DefaultSecureProtocols"=dword:00000800

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
      "DefaultSecureProtocols"=dword:00000800

Next, double-click to execute the file. The values are then automatically adopted in the registry.

Afterwards, you can delete the .REG file.

Please restart your computer so that the changes to the registry take effect.