Our SSRS reports failing with the following error. Authentication failed because the remote party has closed the transport stream.
We have recently upgraded SQL Server Reporting Services (SSRS) from 2016 to 2022 and all the subscriptions both data-driven and standard are failing with authentication failure errors (SSRS Reports failing). This upgrade we did as part of SQL Server Database servers upgrade to the latest 2022.
Error:
“System.Net.Mail.SmtpException: Failure sending mail. —> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.”
Typically above error occurs if there is an issue with the SMPT server or credentials, just verify.
Cause:
Scheduled SSRS reports are failing due to the TLS 1.2 issue. As part of security team concerns we no longer use TLS 1.0 and TLS 1.1.
Resolution:
We had to make some changes in the Windows registry to fix the reports sending issue.
Add the following registry keys to the server.
Make sure TLS 1.0 and 1.1 are disabled
Notes:
- Please make a note of all changes, in case of a rollback situation, it will be easier.
- If your reporting web servers are in the cluster (more than one node) make the below registry changes in all the nodes
For TLS 1.0:
Path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
- “DisabledByDefault” = dword:00000001
- “Enabled” = dword:00000000
Repeat the same for TLS 1.1
For TLS 1.2:
Path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
- “Enabled” = dword:00000001
- “DisabledByDefault” = dword:00000000
Path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
- “SchUseStrongCrypto” = dword:00000001
- “SystemDefaultTlsVersions” = dword:00000001
Path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727
- “SchUseStrongCrypto” = dword:00000001
- “SystemDefaultTlsVersions” = dword:00000001
Path:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
- “SchUseStrongCrypto” = dword:00000001
- “SystemDefaultTlsVersions” = dword:00000001
Path:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727
- “SchUseStrongCrypto” = dword:00000001
- “SystemDefaultTlsVersions” = dword:00000001
Restart the reporting server(s) after the above changes
After the above registry changes our SSRS 2022, server started sending emails to the subscribers.