book
                        
Article ID: CTX571274
                        
                    
                    
                        calendar_today
                        
Updated On: 
                    
                 
                
                    
                
                    
                    
                        
                            
Description
                        
                        
                            
You do not have permission to create/update the database “DATABASE” on server “SQLSERVER\InstanceName, Port”. Provide credentials for an account with that permission during site setup for Always-On SQL Server
The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we expecting is *****. The TLS connection request has failed. The attached data contains the server certificate.
 
                         
                     
                    
                    
                        
                            
                                
Environment
                            
                            
                                Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.
                            
                         
                        
                    
                    
                        
                            
                                
Resolution
                            
                            
                                
Disable “Force Encryption” on SQL Server
- Open “SQL Server Configuration Manager” Tool on SQL Server
 - Click “SQL Server Network Configuration” --> Right click “Protocols for LAB” and click “Properties”
 - Change “Yes” to “No” for Force Encryption and click “OK”
 - Click “SQL Server Service” --> Right click “SQL Server(Instance Name)” and click “Restart”
 
 
Request a new certificate for SQL Servers
- Follow MS certificates requirement to request correct certificates https://learn.microsoft.com/en-us/sql/database-engine/availability-groups/windows/listeners-client-connectivity-application-failover?view=sql-server-ver16#SSLcertificates
 - Install the new certificate to SQL instancehttps://learn.microsoft.com/en-us/sql/database-engine/configure-windows/manage-certificates?view=sql-server-ver16#provision-availability-group-cert
 - Open “SQL Server Configuration Manager” Tool
 - Click “SQL Server Network Configuration” --> Right click “Protocols for LAB” and click “Properties”
 - Change “Yes” to “No” for Force Encryption and click “OK”
 - Click “SQL Server Service” --> Right click “SQL Server(Instance Name)” and click “Restart”
 
Problem Cause
SQL Server running in encryption mode and SSL certificate not meet "Listeners & TLS/SSL certificates" requirement