You do not have permission to create/update the database “” on Server “” during CVAD site setup

You do not have permission to create/update the database “” on Server “” during CVAD site setup

book

Article ID: CTX571274

calendar_today

Updated On:

Description

  • Studio UI Error
You do not have permission to create/update the database “DATABASE” on server “SQLSERVER\InstanceName, Port”. Provide credentials for an account with that permission during site setup for Always-On SQL Server
image.png
  • Windows Event ID 36884
The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we expecting is *****. The TLS connection request has failed. The attached data contains the server certificate.

image.png
 

Environment

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

Resolution

  • Solution 1
Disable “Force Encryption” on SQL Server
  1. Open “SQL Server Configuration Manager” Tool on SQL Server
  2. Click “SQL Server Network Configuration” --> Right click “Protocols for LAB” and click “Properties”
  3. Change “Yes” to “No” for Force Encryption and click “OK”
  4. Click “SQL Server Service” --> Right click “SQL Server(Instance Name)” and click “Restart”
 
  • Solution 2
Request a new certificate for SQL Servers
  1. Follow MS certificates requirement to request correct certificates https://learn.microsoft.com/en-us/sql/database-engine/availability-groups/windows/listeners-client-connectivity-application-failover?view=sql-server-ver16#SSLcertificates
  2. Install the new certificate to SQL instancehttps://learn.microsoft.com/en-us/sql/database-engine/configure-windows/manage-certificates?view=sql-server-ver16#provision-availability-group-cert
  3. Open “SQL Server Configuration Manager” Tool
  4. Click “SQL Server Network Configuration” --> Right click “Protocols for LAB” and click “Properties”
  5. Change “Yes” to “No” for Force Encryption and click “OK”
  6. Click “SQL Server Service” --> Right click “SQL Server(Instance Name)” and click “Restart”

Problem Cause

SQL Server running in encryption mode and SSL certificate not meet "Listeners & TLS/SSL certificates" requirement