63179: Acronis Cyber Backup: after disabling all but TLSv1.2 protocols SQL application-aware backup fails with warning "Failed to collect the metadata of the SQL Server databases selected for backup."

use Google Translate

Symptoms

After you have disabled SSL 3.0, TLS 1.0, TLS 1.1 and left only TLS 1.2 running on the machine, application-aware backup of an SQL server finishes with a warning:

Error code: 4358
Module: 87
LineInfo: 0xEC865955C73BB27A
Fields: {"$module":"aavb_mssql_backuper_vsa64_11010"}
Message: Failed to collect the metadata of the SQL Server databases selected for backup. The databases will not be backed up.

If you try to edit of specify credentials for an SQL server user, you get these errors:

Cannot collect the metadata of Microsoft SQL Server
The specified user is not a member of the sysadmin role in SQL Server instance 'Instance_name'.
Cannot collect the metadata of Microsoft SQL Server
Cannot back up the SQL Server instances due to environment issues.

Solution

The issue has been fixed in Acronis Cyber Cloud 8.0, please update to the latest build.

For Acronis Cyber Backup 12.5, the issue has been fixed in Update 5 (Build 16180), please update to the latest build.

As a workaround without updating, you can enable previous TLS versions on the machine (1.0 and 1.1):

  1. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0
  2. Enable:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client]
    "Enabled"=dword:00000001
    "DisabledByDefault"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
    "Enabled"=dword:00000001
    "DisabledByDefault"=dword:00000000
  3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1
  4. Enable:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
    "DisabledByDefault"=dword:00000000
    "Enabled"=dword:00000001
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
    "DisabledByDefault"=dword:00000000
    "Enabled"=dword:00000001

Tags: