KB000013: Access Manager cannot be installed on Windows Server 2016 with TLS 1.0 disabled

Summary

If you try to install the Access Manager Service on Windows Server 2016, when policies have been applied to harden TLS and remove support for TLS 1.0 and 1.1, AMS will fail to install.

Cause

The built-in SQL driver in Windows Server 2016. used by the installer, is unable to use TLS 1.1 or TLS 1.2. This causes the installer to fail as it cannot connect to the database.

This impacts only the installer itself. AMS will operate correctly with only TLS 1.2 enabled.

This issue does not impact Windows Server 2019 or later.

Resolution

The only workaround available at this stage is to temporary enable TLS 1.0 and TLS 1.1 on the server, perform the installation or upgrade, and then disable TLS 1.0 and 1.1 again.

Note that to install future upgrades, the same process will need to be repeated.