KB358434440: WebCenter - Cannot connect to SQL Server 2014 or SQL Server 2012

Summary

When upgrading or installing WebCenter 22.03 and using a SQL Server 2012 or SQL Server 2014, it can happen that WebCenter refuses to connect to the DB. This happens because WebCenter 22.03 only supports TLS v1.2 or higher out of the box. 

Typically this issue can be solved by installing the relevant service packs for the SQL Server installation (see https://support.microsoft.com/en-us/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe for more info). 

Symptoms 

During the installation of WebCenter, the DB script will fail with an error message similar to: 

SEVERE: failed to connect to DB
com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "The server selected protocol version TLS10 is not accepted by client preferences [TLS12]". ClientConnectionId:dc09e17b-b47d-4cd6-9a68-1669d8458958

Solution

The preferred solution

Install the service packs enabling TLS v1.2 support as described in: https://support.microsoft.com/en-us/topic/kb3135244-tls-1-2-support-for-microsoft-sql-server-e4472ef8-90a9-13c1-e4d8-44aad198cdbe

Other possibility

Follow the below steps carefully (this needs to be done on the app server): 

1. Shut down any WebCenter related service.
2. Navigate to <install location>\WebCenter\JavaRuntime\jre\lib\security.

3. Open the java.security file in a text editor, search for jdk.tls.disabledAlgorithms= and you should find something that looks like:

   java.security

   jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \
       DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \
       include jdk.disabled.namedCurves

4. Remove TLSv1 and/or TLSv1.1 from the line mentioned above. 
5. Save the file.
6. Start all WebCenter services again.