topic RE: Client is unable to finish the security negotiation within the configured timeout in Product Forum

Client is unable to finish the security negotiation within the configured timeout

GyulaEgyed — Wed, 11 Nov 2020 08:16:00 GMT

Hi!

I have the following problem on one of our VM Desktops. When we use Login process sometimes the Blue Prism Listener throws the below error:

Client is unable to finish the security negotiation within the configured timeout (00:00:00). The current negotiation leg is 1 (00:00:00)

I checked the below link trying to resolve the problem but we don't use Proxy settings so this should not be the problem:

Support Center | Blue Prism Portal

What is strange that after we restart the machine there is a high chance that the listener will start without any problem.

Anybody has an idea what should be checked in our system?

Kind regards,
Gyula

------------------------------
Gyula Egyed
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

hossein.azimi — Sun, 15 Nov 2020 23:24:00 GMT

Hi Gyula,

This issue can occur because when you start the program using BPServer.exe, it is starting as the user that is currently logged onto the server, and not as the system account. However, the Access Control List (ACL) has been set to the SYSTEM account.

To solve the issue

Start the Blue Prism Server as a service and not through BPServer.exe.

------------------------------
Hossein Azimi
Customer Support Engineer, APAC
Blue Prism
Sydney NSW
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

JerinJose — Mon, 16 Nov 2020 06:58:00 GMT

Hi Gyula,

Are you using WCF Transport encryption as the BP server connection type? if you are using transport encryption you need to associate certificate thumbprint in the resource pc startup script for establishing end to end secure connection. also if you have a Layer 4 load balancer placed in front of your application server. ensure you have the same cypher suites available in TLS1.2 registry settings.

Also change the logon type of the Blueprism server service of your connection and update it with the Service account of your application server.

------------------------------
Jerin Jose
RPA Product SME
EY
Asia/Kolkata
*"If you find this post helpful, please press the "Recommend" Button.*
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

GyulaEgyed — Wed, 18 Nov 2020 16:06:00 GMT

Hi Jerin Jose,

Thanks for the reply! We are using WCF: SOAP with Message Encryption & Windows Authentication as a connection type.

Kind regards,
Gyula

------------------------------
Gyula Egyed
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

GyulaEgyed — Wed, 18 Nov 2020 16:14:00 GMT

Hi Hossein,

Thanks for the reply! We start Blue Prism server from a .bat file which starts two services. E.g.
sc start "Blue Prism Server:Default"
sc start "Blue Prism Server:RPA_UAT" "RPA-UAT"

Kind regards,

Gyula

------------------------------
Gyula Egyed
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

diljithkp — Tue, 19 Apr 2022 12:31:00 GMT

Hi,
Please check the PROXY first before going to any other changes, hope this will help you.

------------------------------
Diljith kp
IT consultant
Exponential Digital solutions
Asia/Kolkata
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

ChristopherNgo — Fri, 16 Dec 2022 02:54:00 GMT

Hi Gyula,

Did you manage to resolve your issue? (noted that it's been a while since you posted)
We are encountering similar issues with intermittent incidents with the same error.
We use automatic proxy setup so can't add exception rule to our server address.
We also have our Blue Prism Server started as a service.
Our version of BP is v6.7.2.

------------------------------
Christopher Ngo
Senior Solutions Architect
Westpac
Australia/Sydney
------------------------------

RE: Client is unable to finish the security negotiation within the configured timeout

Thiagorossharma — Sun, 28 Jan 2024 11:26:00 GMT

Your message indicates a detailed and technical approach to ensuring a secure connection, specifically with WCF Transport encryption. The mention of associating certificate thumbprint in the resource PC startup script demonstrates a careful consideration of security measures. Additionally, addressing the importance of having consistent cipher suites in TLS 1.2 registry settings, especially when using a Layer 4 load balancer, highlights a comprehensive approach to securing end-to-end connections. This level of attention to encryption and load balancing practices is commendable for maintaining a robust and secure system.Fm Whatsapp Apk

------------------------------
Thiagoros sharma
------------------------------