# Help - Newbie - Lost DB connection - SSL error

**URL:** <https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [July 6, 2022, 8:51pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590 "2022-07-06T20:51:01Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 6, 2022, 8:51pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/1 "2022-07-06T20:51:02Z")

</div>

Hi all,

I am new to ignition and I am a network guy trying to help the plant. We have an ignition 7.9.13 deployment for a cell that has lost the connection to the DB. “Cannot create PoolableConnectionFactory (The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption…”

The SQL database is a corporate maintained server (SQL server 2019, Windows server 2019) and about the time they lost connection corporate disabled TLS 1.0 and 1.1 on the SQL server. The SQL driver in ignition is sqljdbc4.jar.

Any ideas?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 6, 2022, 8:57pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/2 "2022-07-06T20:57:59Z")

</div>

You may need to make sure Ignition is using the latest version of JDK 8 and/or a newer SQL server JDBC driver.

Based on the [support matrix](https://docs.microsoft.com/en-us/sql/connect/jdbc/microsoft-jdbc-driver-for-sql-server-support-matrix?view=sql-server-ver16) for SQL server 2019 you need to be on at least version 7.4 of the driver.

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [July 6, 2022, 9:12pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/3 "2022-07-06T21:12:06Z")

</div>

You might news to add an additional parameter as well into the database connection config:

```auto
trustServerCertificate=true

```

Otherwise need to do something with certificates. there was a change in sql server/jdbc at some point.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 6, 2022, 9:16pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/4 "2022-07-06T21:16:09Z")

</div>

> [@nminchin](#):
>
> there was a change in sql server/jdbc at some point.

Version 10.1 enabled encryption by default, but he indicated he's on a very old version (sqljdbc4.jar), so not sure if that's the issue or not.

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:04pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/5 "2022-07-07T13:04:28Z")

</div>

So I did download the mssql-jdbc-10.2.1.jre8.jar from MS. When I went to create a new database driver and upload the file within ignition I didn’t know what to make the “classname” everything else I was able to copy from the existing driver.

---

<div class="post-metadata">

**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\
**Post date:** [July 7, 2022, 1:07pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/6 "2022-07-07T13:07:26Z")

</div>

You shouldn’t need to create a new… just update the JDBC from here:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/e/bec002dd5c5481d5a5007f34c3c0e9f446de5b06.png)

Just click the “Choose File” and point to the new jdbc driver and it’ll update the existing driver with the new JDBC file.

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:12pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/7 "2022-07-07T13:12:12Z")

</div>

I didn’t set it up originally. Is there a way to pull the existing .jar file so I could put it right back the way it was?

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:24pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/8 "2022-07-07T13:24:55Z")

</div>

OK. So I bit the bullet and tried what you suggested. In the driver screen it now shows the new .jar

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/e/5e91231f0f4d05cf5f9ec604c40a7cfa3a7ad964.png)

But the connections still show faulted. Do I need to to do some form of reset?

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:33pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/9 "2022-07-07T13:33:53Z")

</div>

I don’t know if I didn’t notice this before or if this is a change in the error: "The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: “sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”

Looks like maybe a certificate issue?

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:36pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/10 "2022-07-07T13:36:26Z")

</div>

Definitely a different error. I checked the other instance that has the same issue and this was the original error " Cannot create PoolableConnectionFactory (The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: “SQL Server did not return a response. The connection has been closed.”

---

<div class="post-metadata">

**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\
**Post date:** [July 7, 2022, 1:40pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/11 "2022-07-07T13:40:09Z")

</div>

> [@nminchin](#):
>
> `trustServerCertificate=true`

Did you add

```auto
trustServerCertificate=true

```

To the additional driver properties on the Extra Connection Properties of the database connection? If there are already properties there, add it to the end with a semi-colon to seperate them.

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:42pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/12 "2022-07-07T13:42:31Z")

</div>

Halleluiah. I had a comma not a ;

---

<div class="post-metadata">

**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\
**Post date:** [July 7, 2022, 1:43pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/13 "2022-07-07T13:43:07Z")

</div>

So things are rocking back again?

MSSQL can be a tricky beast

---

<div class="post-metadata">

**Author:** ![Ron\_Blaschke](https://avatars.discourse-cdn.com/v4/letter/r/919ad9/32.png) [@Ron\_Blaschke](https://forum.inductiveautomation.com/u/Ron_Blaschke)\
**Post date:** [July 7, 2022, 1:59pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/14 "2022-07-07T13:59:57Z")

</div>

Yes. replacing the .jar instead of trying to make a new driver and adding the trust with a ; not a , and we have a valid connection and data flowing! Thank you all!!

---

<div class="post-metadata">

**Author:** ![Alan\_Cannon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alan_cannon/32/31171_2.png) [@Alan\_Cannon](https://forum.inductiveautomation.com/u/Alan_Cannon)\
**Post date:** [May 31, 2023, 3:47pm UTC](https://forum.inductiveautomation.com/t/help-newbie-lost-db-connection-ssl-error/61590/15 "2023-05-31T15:47:29Z")

</div>

Appreciate the post. This Solution works..
