Handshake error in IQ Service Test Connect

Identity Security Cloud (ISC) ISC Discussion and Questions
,
4

This is a TLS/SSL handshake failure between the IQService and SailPoint ISC tenant. It typically points to a mismatch in TLS versions, certificates or encryption.

Discussions regarding the same problem:

Troubleshooting steps:

  1. Check TLS version compatibility:
    Ensure both IQService and the connecting client (e.g., ISC tenant) are configured to use the same TLS version
  2. Verify certificate validity:
    Confirm the server certificate used by IQService is valid, trusted, and not expired. If using a self-signed certificate, make sure it’s trusted by the client.
  3. Review IQService configuration:
    Double-check the useTLS, tlsVersion, subject, and serialNumber settings in the IQService configuration file.
  4. Confirm client configuration:
    Make sure the ISC tenant or other connecting application is set to use TLS and references the correct certificate.
  5. Check for network interference:
    Ensure there are no firewalls, proxies, or network devices modifying or blocking the handshake packets.
  6. Test direct connectivity:
    Try connecting directly (bypassing any intermediaries) to rule out network issues.
  7. Enable debug logging in IQService:

    • Open the IQService configuration file and set the logging level to DEBUG or TRACE.

    • Restart the IQService after making this change.

    • Review the detailed logs for handshake errors, certificate issues, or protocol mismatches.

  8. Restart services:
    After making configuration changes, restart IQService and any related services to apply updates.