Recently TLS change/enabled on IQ server. Power shell scripts are not executing on IQ server service now

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Recently TLS change/enabled on IQ server. Power shell scripts are not executing on IQ server service now. Let us know how to get back that.

2

@shaffusailpoint
Could you please share the SailPoint IdentityIQ version you’re using and a screenshot of the error that appears when you run the script file? Also, it looks like this question was posted under the Identity Security Cloud (ISC) section—just a heads-up in case it was meant for the IdentityIQ forum. Providing more details will help the community assist you better.

3

nope it is for ISC not iiq

4

Apologies, I misread earlier.Please switch back to non-TLS. After doing so, were you able to run the script successfully?

5

Does test connection work or is it only the PS executions? What IQS port are you using? Also make sure you have registered a user with the service and have that in the config.

6

yes test connect and aggregations all works fine. issue only with PS. Please let us know little bit about “registered a user with the service and have that in the config”

7

Please use following resources which help to changing modes and try for the same.


how to check whether you can run powershell scripts or not ?
Get-ExecutionPolicy

error
error969Ă—497 86.5 KB

8

@shaffusailpoint This is because your IQService would have been upgraded to IQService-MAY-2025 version. From this version onwards you need to use TLS enabled to make Before and After scripts working. Earlier if you have configured your source by disabling TLS then you need to properly enable TLS in the source and also you need to make sure to disable non-TLS communication for that same instance. The steps are provided in the below doc.

Here is the release update to this version

9

we have enabled this and yet Before and After PS not working

10

Are you able to see any logs on IQService? to find it out run the iqservice in debug mode and see the logs on console or change the IQService logs level and see the error if it adding any error.

11

We had the same issue as well.
We found an error in our IQService logs which helped us with resolving the issue -
XX/xx/2025 03:14:49 : AbstractConnector [ Thread-43 ] WARN : “Failed to execute native after provisioning script.ScriptExecutor service is not available.”
xx/xx/2025 03:14:49 : AbstractConnector [ Thread-43 ] WARN : “One of the possible reasons for internally disabling the ScriptExecutor service is presence of non-TLS port configuration for the IQService”

The script executor service was disabled because of the presence of TLS and non-TLS port enabled. You need to ensure that the non TLS Port is disabled by following the steps in Recent Updates.

Hope this helps, as our script started working after that.

Thanks
Anita

12

Yes I suspect the same and that could have the problem in executing the scripts. The steps to disable non-TLS port are mentioned in the Recent Updates. Better try with an old working script to validate whether it is working or not after disabling non-TLS port

13

Issue is fixed by following the steps in Recent Updates

14

@udayputta has provided the solution why you are marking again your comment as a solution these is not a right way he invested his time and provided the solution

1 Like
15

@Chaithu9110 :smiling_face: I often see that in other posts as well. Anyway it’s okay at the end the problem is resolved that is the intent of the community. This points thing is only to encourage more people to come forward and provide solutions. :grinning_face: I will leave that to SailPoint team and better analyse this kind of post and allow the real posts get benefited.

1 Like
16

hope so lets talk in ambasdoor group @udayputta