Failed to establish the HTTPS connection: TLS error (54)

[Deadlock4400]

Hello Everybody, After KSC 11 installation, when going to update the KSC database repository, it's showing "Failed to establish the HTTPS connection: TLS error (54)" There was a similar problem was written in another post - KSC 11: can not update Antivirus DB with Traffic Security on There a solution given by Oleg Bykov - "Please add klserver.exe and Up2Date.exe to the Traffic Security exclusions." But i didn't understand exactly where i have to exclude those. Waiting to have solution....... Thanks in Advance Deadlock4400

[Nikolay Arinchev]

Hi, Could you please provide us with GSI log from administration server host? Are there any antivirus solutions are used at admin server host?

[Deadlock4400]

Dear Nikolay Antipov

[Deadlock4400]

Dear Nikolay arinchev Can you please tell me how to add klserver.exe and Up2Date.exe to the Traffic Security exclusions.

[Nikolay Arinchev]

Could you please clarify what antivirus product is used at your KSC server?

[Deadlock4400]

Hello Nikolay arinchev The KSC version 11.0.0.1131 The KES version 11.1.1.126

[Nikolay Arinchev]

Thank you for that info! Could you please add klserver.exe and Up2Date.exe to trusted zone at KES 11.1 and launch installation once again? Please inform us about result.

[Deadlock4400]

Dear Nikolay arinchev Exactly where I should put those klserver. exe and Up2Date.exe? Please in details please.

[Deadlock4400]

Hello Nikolay arinchev The GSI log in being attached here.

[Dmitry Parshutin]

Dear Nikolay arinchev Exactly where I should put those klserver. exe and Up2Date.exe? Please in details please.

Hello! You should put it to the trusted zone of your KES. Please see this article https://support.kaspersky.com/14832

[Deadlock4400]

Hello Dmitry Parshutin Thank you for your response. After doing those exclusions, still same problem for KSC database update repository!

[LingNoi]

Install Patch A for KSC 11, the issue is fixed https://support.kaspersky.com/15022 Best Regard

[Deadlock4400]

Hello LingNoi Thank you for your reply. Can you tell how can I install the patch on KSC 11? Or the patch will be show on KSC which should be installed?

[Deadlock4400]

Hello everybody, Still the problem is visible.... Though I uploaded the gsi log into this community!

[Dmitry Parshutin]

Hello everybody, Still the problem is visible....

Hello! Is this after the patch applying? Thank you!

[Deadlock4400]

Hello Dmitry Parshutin The KSC 11.0.0.1131 was installed and the KES 11.1.1.126 and the Network agent is also latest 11. The problem is KSC database repository task is unable to download Update from Kaspersky Lab and the Screenshot is posted above reply before. As several times and several days it failed, had to use Update Utility tool and tag the update source to it for all KES and it's working. But the main thing that still the Kaspersky Update repository task unable to update KSC repository! As KSC 11.0.0.1131 is installed then where can i find the patch to fix this problem? please Thanks in Advance Deadlock4400

[bitboy]

Hello, i have the same issue after installing KSC11. I'm unable to install auopatch A, its not listet and i couldn't find an offline installer.

[Deadlock4400]

Kaspersky should update their latest ksc11 to a comfortable version which will be able to bypass those problems sooner.

[vcocaud]

Same problem here with : - KSC 11.0.0.1131 with autopatch A installed (Up2Date.exe v11.0.0.1188) - KSVLA 5.0.52.677 (so there is no "Traffic Security" module) Task fails randomly.

[bitboy]

Found autopatch a at http://dnl-cn2.kaspersky-labs.com/updates/bin/kscp/11.0.0.1131/ installed it but no success. i still get TLS error 54.

[Patrick Sommer]

Hi guys, i dont know if i understand your problem right, but usually the problem ist, that your ksc download on https and your proxy break the tls (ssl bumping/tls-injection). There are two possibilitys, frist deaktivitact ssl-bumping for the https in the following link. 2nd alternativ change the way ksc download it, not recommanded but often in use, scroll the same link down there are the parameters. https://support.kaspersky.com/15052

[bitboy]

Hi, thanks for pointing to a workaround. i'm just wondering why it was no issue in ksc 10? Did it include an invisible fallback to http? btw this command creates the following registry entry: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\1093\1.0.0.0\Updater DisableKLHttps Value: 1 i guess deleting it and restarting the service will undo the changes.

[Patrick Sommer]

Hi bitboy, thanks for your answer. Does your problem fix with that?

[bitboy]

Yes its downloading now :)

[Deadlock4400]

Hi, thanks for pointing to a workaround. i'm just wondering why it was no issue in ksc 10? Did it include an invisible fallback to http? btw this command creates the following registry entry: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\1093\1.0.0.0\Updater DisableKLHttps Value: 1 i guess deleting it and restarting the service will undo the changes.

Hello bitboy I agree with you about the "Did it include an invisible fallback to http" The command you show there about registry, if I do the DisableKHttps value to 1 then will the KSC update work? Thanks in Advance Deadlock4400