KB0003 - Slow Endpoints and TLS Settings

KB0003 - Slow Endpoints and TLS Settings


Be advised that if the TLS settings on a Windows Server are modified, this can result in a severe performance degradation

Symptom #1

In the Event Viewer (System Log) there are errors with source Schannel indicating that a "fatal error that occurred while creating a TLS client credential"



Symptom #2

The PSU logs show the error "[ERR] An unhandled exception has occurred while executing the request."

Symptom #3

Endpoints do not respond or are very extremely slow to respond

Root Cause

TLS settings were changed (possibly by or related to Microsoft patching)

Resolution

Check the TLS settings and ensure they are still configured correctly. See screenshot below for an example of how the TLS 1.2 protocol should be set.





    • Related Articles

    • KB0015 - Offline PSU server has slow dashboards

      Disclaimer Please be careful with changing any settings on your server around the Certificate Revocation List. You should only do this if you know what you are doing. Read the related Github articles (linked below) in their entirety. Symptom PSU ...
    • Variables created within modules are not available in Universal API endpoints

      Version: 1.4+ When using environments that import modules, you will not be able to access variables that are either global or export from modules.  Affected Configuration The affected configuration includes modules that export variables either with ...
    • PowerShell Universal cmdlets return a 404 over HTTPS

      Version: 1.4 PowerShell Version: Windows PowerShell 5.1 Problem When issue commands against the PowerShell Universal Management API (such as Get-UAJob, Get-UAScript, etc), the cmdlet will return a 404 error. This can happen when running scripts ...
    • OpenID Connect does not work with HTTP

      Version: Any Problem: When configuring PowerShell Universal OpenID Connect authentication, the server will return a 500 error when attempting to authenticate.  Root Cause Chrome 80 introduced new settings that require cross-site cookies to be secure. ...
    • KB0011 - Are licenses different between Production, QA and Test/Development servers?

      Developers licenses with limited functionality may be created for PowerShell Universal QA/Test servers by using the 'Generate Developer License' button under Settings -> License (see screenshot below) ? You must have at least 1 licensed instance of ...