Error: Unable to establish database connection after disabling TLS 1.0

The following error may be received when logging in to Raiser's Edge if TLS 1.0 has been disabled on the server or workstation running Raiser's Edge:

Unable to establish database connection. 

[Microsoft][ODBC SQL Server Driver][DBNETLIB]SSL Security error
Native error:18
[Microsoft][ODBC SQL Server Driver][DBNETLIB]ConnectionOpen
(SECCreateCredentials()).
Native error:1.
For more information see Knowledgebase solution 47023 or BB140810
User-added image

How do I prepare to disable TLS 1.0 when using Raiser's Edge?
 
This error may occur as a result of disabling the TLS 1.0 protocol on the Raiser's Edge SQL server or workstation.

This is resolved in Raiser's Edge 7.96, patch 7 and above. If your database is installed locally, download and install the latest version and patch, if applicable.

This error can be avoided by taking the following steps before disabling TLS 1.0:
  1. Ensure all RE-using workstations and the server support TLS 1.2:
    • For workstations and servers, ensure ODBC driver 11 or later is installed.
    • For servers, install the appropriate SQL Server update to ensure TLS 1.2 support. Updates for various SQL Server versions here. TLS 1.2 support is not available for express instances of SQL server. If your organization needs to disable TLS 1.0, upgrade to a full version of SQL Server. Additional components for full support of TLS 1.2 on the client side can be found below the links to updates.
Note: We provide links to third-party websites in an effort to help you resolve your issue. We are not responsible for the information on third-party websites, and we cannot assist in implementing the updates on these websites.
  1. Install patch 7 or above. How to install The Raiser's Edge patch (includes video demo)
  2. In the Blackbaud Management Console, edit the description of the RE database or detach and reattach the database. This pushes a registry update out to the workstations. How to change a database description
  3. Disable TLS 1.0 as desired.
NOTE: Blackbaud Support cannot advise whether TLS 1.0 should be disabled, nor can we assist with installing ODBC drivers, Microsoft updates, or disabling TLS 1.0.

Steps to Duplicate

  1. On the Raiser's Edge SQL server open the registry
  2. Browse to HKEY_LOCAL_MACHINE > SYSTEM > CURRENT CONTROL SET > CONTROL > SecurityProviders > SCHANNEL > PROTOCOLS
  3. Change the DisabledbyDefault value to 1
  4. Attempt to log in to Raiser's Edge
  5. Receive an ODBC SSL security error

Environment

 Raiser's Edge
 7.96
 7

Was this article helpful?