After upgrading IQService issue TLS connection

pkumar22 · May 30, 2023, 2:42am

We have upgraded IQService getting the below error, and the screenshot attached Upgrade Service is Stopped, but in the services, I can see all three services are running.

Before the upgrade, it was running with TLS connections.

05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “Certificate error: RemoteCertificateChainErrors”
05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “An Exception occurred while accepting new client request :An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
05/29/2023 17:25:44 : RpcServer [ Thread-8 ] ERROR : “Error occurred while checking the availaility of newer version :: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “Certificate error: RemoteCertificateChainErrors”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “An Exception occurred while accepting new client request :An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
05/29/2023 17:25:45 : RpcServer [ Thread-8 ] ERROR : “Caught exception while notifying upgrade status: System.Exception: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor() —> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
— End of inner exception stack trace —
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
at RPCServer.rpcserver.UpgradeServiceClient.Execute(RpcRequest request)
at sailpoint.rpcserver.RpcServer.NotifyUpgradeStatus(String operation, String status, Exception ex, ArrayList stepsPerformed), The exception occurred for operation : upgrade and status being reported was : declined, steps performed till now : System.Collections.ArrayList, Exception being reported was : No Error Reported”
05/29/2023 17:25:45 : RpcServer [ Thread-8 ] ERROR : “Error while upgrade check: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:26:24 : RpcHandler [ Thread-5 ] ERROR : “Malformed request received from client - 172.19.66.20:51412. Received header length as - Error in parsing - Input string was not in a correct format.”
05/29/2023 17:26:31 : RpcHandler [ Thread-4 ] ERROR : “Malformed request received from client - 172.19.66.20:51440. Received header length as - Error in parsing - Input string was not in a correct format.”

RAKGDS · June 20, 2023, 2:32pm

Hi Prasantha,
Did you try to restart the IQService after the upgrade ? Are you still facing the issue ?

Thanks
Rakesh Bhati

Remold · June 20, 2023, 9:02pm

This looks like a SSL certificate issue.

The certificate of the IQService must be added to the truststores of the IIQ Servers.
Take a look to the following link for re-setup TLS for IQService.
https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273

If this does not help, please reply to this thread and we can help further. I (and others) have setup IQService with TLS many times

Remold

pkumar22 · June 20, 2023, 10:17pm

the link is giving the below message.

An invalid set of parameters has been specified in the url.

Return to my original page

Remold · June 21, 2023, 5:36am

Sorry, pasted the link twice

https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273

sauvee · June 21, 2023, 9:20am

I do believe this is concerning IdentityNow, in which case the certificate files (crt, cer) need to be copied on the Virtual Appliance under /home/sailpoint/certificates in order to be picked up by IdentityNow. Reboot the VA once you’ve copied the certs.

pkumar22 · June 21, 2023, 3:31pm

Added the Cert and rebooted the VA and when do test and it is reading correct cert, but still getting failed with below error.

Any idea please.

06/21/2023 09:27:17 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
06/21/2023 09:27:17 : RpcServer [ Thread-8 ] ERROR : “Caught exception while notifying upgrade status: System.Exception: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor() —> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
— End of inner exception stack trace —
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
at RPCServer.rpcserver.UpgradeServiceClient.Execute(RpcRequest request)
at sailpoint.rpcserver.RpcServer.NotifyUpgradeStatus(String operation, String status, Exception ex, ArrayList stepsPerformed), The exception occurred for operation : upgrade and status being reported was : declined, steps performed till now : System.Collections.ArrayList, Exception being reported was : No Error Reported”
06/21/2023 09:27:17 : RpcServer [ Thread-8 ] ERROR : “Error while upgrade check: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”

has context menu

RAKGDS · June 22, 2023, 10:00am

Can you check this post ?

Topic		Replies	Views
IIQ 8.5 IQservices issue IIQ Discussion and Questions identityiq	14	423	August 20, 2025
Need help to Setup IQService on new window server ISC Discussion and Questions identity-security-cloud , connectors	12	601	March 19, 2025
Error in the IQ service logs ISC Discussion and Questions identity-security-cloud	2	1694	December 27, 2023
IIQ upgrade error 8.2p2 to 8.3 IIQ Discussion and Questions identityiq	4	2210	August 14, 2023
TLS Enablement for IQ Service and VAs using Self Signed Certificate ISC Community Knowledge Base identity-security-cloud , provisioning , virtual-appliance , iqservice , virtual-appliance-cluster	11	1250	December 22, 2025

After upgrading IQService issue TLS connection

Related topics