Kaspersky
Solved

Failed to establish the HTTPS connection: TLS error (54)


Userlevel 2
Badge
Hello Everybody,

After KSC 11 installation, when going to update the KSC database repository, it's showing

"Failed to establish the HTTPS connection: TLS error (54)"

There was a similar problem was written in another post -
KSC 11: can not update Antivirus DB with Traffic Security on



There a solution given by @Oleg Bykov - "Please add klserver.exe and Up2Date.exe to the Traffic Security exclusions."

But i didn't understand exactly where i have to exclude those.

Waiting to have solution.......

Thanks in Advance

@Deadlock4400
icon

Best answer by Patrick Sommer 18 July 2019, 11:19

Hi guys,

i dont know if i understand your problem right, but usually the problem ist, that your ksc download on https and your proxy break the tls (ssl bumping/tls-injection).

There are two possibilitys, frist deaktivitact ssl-bumping for the https in the following link.
2nd alternativ change the way ksc download it, not recommanded but often in use, scroll the same link down there are the parameters.

https://support.kaspersky.com/15052
View original

25 replies

Userlevel 5
Badge +4
Hi,

Could you please provide us with GSI log from administration server host?
Are there any antivirus solutions are used at admin server host?
Userlevel 2
Badge
Dear @Nikolay arinchev

Can you please tell me how to add klserver.exe and Up2Date.exe to the Traffic Security exclusions.
Userlevel 5
Badge +4
Could you please clarify what antivirus product is used at your KSC server?
Userlevel 2
Badge
Hello @Nikolay arinchev
The KSC version 11.0.0.1131
The KES version 11.1.1.126
Userlevel 5
Badge +4
Thank you for that info!

Could you please add klserver.exe and Up2Date.exe to trusted zone at KES 11.1 and launch installation once again?
Please inform us about result.
Userlevel 2
Badge
Dear @Nikolay arinchev
Exactly where I should put those klserver. exe and Up2Date.exe? Please in details please.
Userlevel 2
Badge
Hello @Nikolay arinchev

The GSI log in being attached here.
Userlevel 3
Badge +2
Dear @Nikolay arinchev
Exactly where I should put those klserver. exe and Up2Date.exe? Please in details please.

Hello!
You should put it to the trusted zone of your KES. Please see this article https://support.kaspersky.com/14832
Userlevel 2
Badge
Hello @Dmitry Parshutin

Thank you for your response.
After doing those exclusions, still same problem for KSC database update repository!
Userlevel 1
Badge
Install Patch A for KSC 11, the issue is fixed

https://support.kaspersky.com/15022

Best Regard
Userlevel 2
Badge
Hello @LingNoi

Thank you for your reply.
Can you tell how can I install the patch on KSC 11?
Or the patch will be show on KSC which should be installed?
Userlevel 2
Badge
Hello everybody,

Still the problem is visible.... Though I uploaded the gsi log into this community!
Userlevel 3
Badge +2
Hello everybody,

Still the problem is visible....

Hello!
Is this after the patch applying?
Thank you!
Userlevel 2
Badge
Hello @Dmitry Parshutin
The KSC 11.0.0.1131 was installed and the KES 11.1.1.126 and the Network agent is also latest 11.

The problem is KSC database repository task is unable to download Update from Kaspersky Lab and the Screenshot is posted above reply before.
As several times and several days it failed, had to use Update Utility tool and tag the update source to it for all KES and it's working.
But the main thing that still the Kaspersky Update repository task unable to update KSC repository!

As KSC 11.0.0.1131 is installed then where can i find the patch to fix this problem? please

Thanks in Advance
@Deadlock4400
Userlevel 1
Hello,
i have the same issue after installing KSC11. I'm unable to install auopatch A, its not listet and i couldn't find an offline installer.
Userlevel 2
Badge
Kaspersky should update their latest ksc11 to a comfortable version which will be able to bypass those problems sooner.
Same problem here with :

- KSC 11.0.0.1131 with autopatch A installed (Up2Date.exe v11.0.0.1188)
- KSVLA 5.0.52.677 (so there is no "Traffic Security" module)

Task fails randomly.
Userlevel 1
Found autopatch a at http://dnl-cn2.kaspersky-labs.com/updates/bin/kscp/11.0.0.1131/
installed it but no success.
i still get TLS error 54.
Badge
Hi guys,

i dont know if i understand your problem right, but usually the problem ist, that your ksc download on https and your proxy break the tls (ssl bumping/tls-injection).

There are two possibilitys, frist deaktivitact ssl-bumping for the https in the following link.
2nd alternativ change the way ksc download it, not recommanded but often in use, scroll the same link down there are the parameters.

https://support.kaspersky.com/15052
Userlevel 1
Hi,
thanks for pointing to a workaround. i'm just wondering why it was no issue in ksc 10?
Did it include an invisible fallback to http?

btw this command creates the following registry entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\1093\1.0.0.0\Updater
DisableKLHttps
Value: 1

i guess deleting it and restarting the service will undo the changes.
Badge
Hi bitboy,
thanks for your answer. Does your problem fix with that?
Userlevel 1
Yes its downloading now 🙂
Userlevel 2
Badge
Hi,
thanks for pointing to a workaround. i'm just wondering why it was no issue in ksc 10?
Did it include an invisible fallback to http?

btw this command creates the following registry entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\1093\1.0.0.0\Updater
DisableKLHttps
Value: 1

i guess deleting it and restarting the service will undo the changes.

Hello @bitboy
I agree with you about the "Did it include an invisible fallback to http"
The command you show there about registry, if I do the DisableKHttps value to 1
then will the KSC update work?

Thanks in Advance
@Deadlock4400
Userlevel 1
Hi Deadlock,

the command proposed by Patrick Summer
https://support.kaspersky.com/15052
klscflag.exe -fset -pv klserver -s Updater -n DisableKLHttps -t d -v 1

creates this registry entry. After that updates were working again but only uses http instead of https.
Userlevel 2
Badge
Hello @bitboy

Thank you make me clear.

Reply / Ответить