NetWorker: SQL backup fails - nsrsqlsv: SSL provider: The certificate chain was issued by an authority that is not trusted

Summary: NetWorker Module for Microsoft (NMM) SQL Server database backup fails. The error reported is "nsrsqlsv: SSL provider: The certificate chain was issued by an authority that is not trusted." ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The symptoms of this issue are: 

  • NetWorker Module for Microsoft (NMM) SQL Server database backup fails.   
  • The error reported is "nsrsqlsv: SSL provider: The certificate chain was issued by an authority that is not trusted."    
  • ​​​The System event log on the SQL server contains one or more of the following errors:
Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36882
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
The certificate received from the remote server was issued by an untrusted certificate authority. 
Because of this, none of the data contained in the certificate can be validated. 
The SSL connection request has failed. The attached data contains the server certificate.


Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36884
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
The certificate received from the remote server does not contain the expected name. 
It is therefore not possible to determine whether we are connecting to the correct server. 
The server name we were expecting is <servername>. 
The TLS connection request has failed. The attached data contains the server certificate.


Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
A fatal alert was generated and sent to the remote endpoint. 
This may result in termination of the connection. 
The TLS protocol defined fatal error code is 48. The Windows SChannel error state is 552.


Log error 

Sql Server Configuration Manager screen 


Cause

The root cause of this issue is due to the "Force protocol encryption" feature that is enabled on the SQL Native Client configuration under SQL Server Configuration Manager.


The "Force Protocol Encryption" setting on the SQL Server forces the use of SSL encryption.
SSL encryption requires an exchange certificate issued by a trusted Certificate Authority (CA) to be available on this machine. 
Without this certificate, the connection fails.

Resolution

To resolve the issue, follow the steps below:

  1. Open the SQL Server Configuration Manager
  2. Right-click SQL Native Client 11.0 Configuration and select properties.
  3. Set the Force Protocol Encryption value to No and select OK.
  4. Perform the same steps for the SQL Native Client 11.0 Configuration (32 bit) configuration
  5. Reboot the SQL Server
  6. Once the SQL server is up and running, check that the issue is resolved.
Article Properties
Article Number: 000223807
Article Type: Solution
Last Modified: 11 Feb 2025
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.