NetWorker：SQL 备份失败 - nsrsqlsv：SSL 提供程序：证书链由不受信任的颁发机构颁发

Summary: NetWorker Module for Microsoft （NMM） SQL Server 数据库备份失败。 报告的错误是“nsrsqlsv：SSL 提供程序：证书链由不受信任的颁发机构颁发。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

此问题的症状有： 

  • NetWorker Module for Microsoft （NMM） SQL Server 数据库备份失败。   
  • 报告的错误是 "nsrsqlsv: SSL provider: The certificate chain was issued by an authority that is not trusted."    
  • SQL Server 上的系统事件日志包含以下一个或多个错误：
Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36882
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
The certificate received from the remote server was issued by an untrusted certificate authority. 
Because of this, none of the data contained in the certificate can be validated. 
The SSL connection request has failed. The attached data contains the server certificate.


Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36884
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
The certificate received from the remote server does not contain the expected name. 
It is therefore not possible to determine whether we are connecting to the correct server. 
The server name we were expecting is <servername>. 
The TLS connection request has failed. The attached data contains the server certificate.


Log Name:      System
Source:        Schannel
Date:          <DATE>
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      <SQL Server Name>
Description:
A fatal alert was generated and sent to the remote endpoint. 
This may result in termination of the connection. 
The TLS protocol defined fatal error code is 48. The Windows SChannel error state is 552.


日志错误 

SQL Server 配置管理器屏幕 


Cause

此问题的根本原因是在 SQL Server 配置管理器下的 SQL Native Client 配置上启用了“强制协议加密”功能。


SQL Server 上的“强制协议加密”设置强制使用 SSL 加密。
SSL 加密要求由受信任的证书颁发机构 （CA） 颁发的交换证书在此计算机上可用。
如果没有此证书，连接将失败。

Resolution

要解决此问题，请执行以下步骤：

  1. 打开 SQL Server 配置管理器
  2. 右键单击 SQL Native Client 11.0 配置 ，然后选择 属性。
  3. 将Force Protocol Encryption值设置为No，然后选择OK。
  4. 对 SQL Native Client 11.0 配置（32 位）配置执行相同的步骤
  5. 重新启动 SQL Server
  6. SQL Server 启动并运行后，检查问题是否已解决。
Article Properties
Article Number: 000223807
Article Type: Solution
Last Modified: 11 Feb 2025
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.