KB0003 - Slow Endpoints and TLS Settings

KB0003 - Slow Endpoints and TLS Settings


Be advised that if the TLS settings on a Windows Server are modified, this can result in a severe performance degradation

Symptom #1

In the Event Viewer (System Log) there are errors with source Schannel indicating that a "fatal error that occurred while creating a TLS client credential"



Symptom #2

The PSU logs show the error "[ERR] An unhandled exception has occurred while executing the request."

Symptom #3

Endpoints do not respond or are very extremely slow to respond

Root Cause

TLS settings were changed (possibly by or related to Microsoft patching)

Resolution

Check the TLS settings and ensure they are still configured correctly. See screenshot below for an example of how the TLS 1.2 protocol should be set.

Reference https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman




    • Related Articles

    • KB0062 - TLS Cipher Suites

      Problem Your organization has security concerns about the TLS cipher suites that are utilized by PowerShell Universal. You may have been informed by your security team (pen testers) that your instance of PowerShell Universal is vulnerable due to the ...

    • KB0015 - Offline PSU server has slow dashboards

      Disclaimer Please be careful with changing any settings on your server around the Certificate Revocation List. You should only do this if you know what you are doing. Read the related Github articles (linked below) in their entirety. Symptom PSU ...

    • Variables created within modules are not available in Universal API endpoints

      Version: 1.4+ When using environments that import modules, you will not be able to access variables that are either global or export from modules.  Affected Configuration The affected configuration includes modules that export variables either with ...

    • KB - 1008 Tax/VAT Exempt at checkout

      Scope In this article you will learn how to make a tax-free purchase at checkout. Problem How do you remove the Tax/VAT on an order? Impact Orders will then need to be refunded for tax if processed without the tax deducted. Resolution Follow the ...

    • PowerShell Universal cmdlets return a 404 over HTTPS

      Version: 1.4 PowerShell Version: Windows PowerShell 5.1 Problem When issue commands against the PowerShell Universal Management API (such as Get-UAJob, Get-UAScript, etc), the cmdlet will return a 404 error. This can happen when running scripts ...