Closed nlmave closed 1 year ago
@nlmave we've had a similar issue on our end, so this input is super helpful,l, we'll work on a solution for this
Not quite sure what was done to fix this problem? I got reports from another user experiencing this issue, so I have at least two leads where a solution can be independently verified.
@nlmave we added the "SchUseStrongCrypto" registry settings to the CDP4-COMET installer. We also experienced the same behavior described in this issue and it was solved by adding the registry settings for "SchUseStrongCrypto". So now .Net uses TLS 1.2 by default.
Good to know! I will inform stakeholders to test the 9.5 release.
Description
During use on one of our training locations, it turned out that COMET-IME was able to connect to the COMET server over https without any problems, however opening the Excel plugin on that very same PC, did NOT allow access to the same server over https with the same credentials. We had to resort to temporary access from the Excel plug-in over http to move forward. The incident was orally reported to RHEA and even on-the-spot consultancy from the RHEA team did not unveil the issue. This ticket is a write-up of that discussion, analysis, and potential fix.
We were suspecting a security setting deep in dotNET itself, that may affect the behavior of strong encryption use from Excel COM based plug-ins.
Steps to Reproduce
After weeks of debugging and testing we finally found a potential root cause; it seems that the following registry settings are needed / forced, in order to allow the Excel plug-in to work:
Kudos to our colleague Ferry Steenvoorde for untangling this mystery.
It is recommended that RHEA checks (the proper use of) this registry setting and if possible enforce it in the tool installer for the Excel plugin. Note that this applies to COMET IME v9.2; it may be different for COMET IME v9.4 as this is using a different dotNET version. We will cross-check once we deploy v9.4 on our infrastructure.
Logs
System Configuration
COMET version:
Web Services:
Environment (Operating system, version and so on):