knash
(Ken Nash)
September 21, 2021, 6:44pm
1
Doing a fresh install.
I am able to install and run the client with no issues.
The Kinetic part is not working as expected.
Trying to get to the api help page and am getting an error.
https://kinetic.embedtek.local/Kinetic2021/api/help/v2/
ERR_SSL_KEY_USAGE_INCOMPATIBLE
Can anyone help me out? I am searching log files and am not seeing anything.
josecgomez
(Jose C Gomez)
September 21, 2021, 6:50pm
2
What binding are you using? Did you install a certificate with the keys?
knash
(Ken Nash)
September 21, 2021, 6:54pm
3
I did a self cert. Not sure what you mean by keys.
Thanks,
Ken
knash
(Ken Nash)
September 21, 2021, 6:57pm
4
i am going to try a different endpoint binding
josecgomez
(Jose C Gomez)
September 21, 2021, 6:58pm
5
You need to allow the keys of that certificate to be accessed by the account running Your App Pool
Start → Run → MMC
File → Add / Remove Snapin
Certificates → Computer Account → Local Computer
Find certificate click Manage Private Keys
Give Full Control to your Epicor Account
2 Likes
josecgomez
(Jose C Gomez)
September 21, 2021, 6:59pm
6
But yes if you switch to UsernameSSLChannel you may be able to bypass this. (may)
1 Like
knash
(Ken Nash)
September 21, 2021, 7:15pm
7
Same error.
I allowed full control the keys of the cert to the EpicorAdmin account.
I even rebooted the server to see if that did the trick.
knash
(Ken Nash)
September 21, 2021, 7:25pm
8
back to where I started so I know the moving parts from here on out.
client works.
Just not Kinetic form.
josecgomez
(Jose C Gomez)
September 21, 2021, 7:29pm
9
Swithc to UsernameSSLChannel does that make a difference?
Olga
(Olga Klimova)
September 21, 2021, 7:39pm
10
When using browser, binding does not matter.
Olga
(Olga Klimova)
September 21, 2021, 7:39pm
11
Is there more error info in Brower security tab?
knash
(Ken Nash)
September 21, 2021, 9:00pm
12
Where would that be? I am using EDGE on the server.
Thanks,
knash
(Ken Nash)
September 21, 2021, 9:29pm
13
not much more information.
Olga
(Olga Klimova)
September 21, 2021, 9:48pm
14
Is it new server used? What OS is there? May be TLS is outdated on server or client?
Check if there are any errors in Event Viewer\System or Security on server side.
If no, I could suggest to switch on SChannel detailed logging and look in the event viewer what errors are shown, as described here:
But it requires reboot…
knash
(Ken Nash)
September 22, 2021, 1:23pm
15
No errors or messages.
This is a new server, though it may be windows server 2022. I’ll see if I can get 2019 installed and retry…
Did you ever find a solution for this? I am thinking it is Windows Server 2022 that now uses TLS1.3. We upgraded to Windows 2022 and got the same error. Classic client runs fine. Rest Services run fine.
Olga
(Olga Klimova)
January 4, 2022, 3:43pm
18
Looks like Windows Server 2022 does not like cert generated y EAC. You have to create your own.
2 Likes
Olga
(Olga Klimova)
January 4, 2022, 3:44pm
19
It does not look the same issue to me. Here only browser client fails to work. Your link says that none of the clients work. Looks like something different.