Craig Martin

Learning and sharing

less than 1 minute read

Did battle with this event log error recently. It turned out to be an IIS binding configuration where Server Name Indication (SNI) was turned off. Since SNI was not enabled for the web application, IIS would accept the request which then failed the SSL handshake, producing the schannel error. Turning on SNI (requiring SNI) tells IIS to refuse the HTTPS request to the IP address, so the client will get an error and will need to use the hostname.

To reproduce:

  • Turn off SNI in the IIS web application bindings
  • Browse to the site using HTTPS://<IP Address>
  • FAIL
  • See Event ID 36887 in the Event Log showing an error code of 46

You May Also Enjoy

Find MIM Active Workflow Definitions

less than 1 minute read

Need to find the workflow definitions that are actually configured to be active? It’s a good way to find configuration bloat that could be cleaned up.

Event Log Entry Count By Severity

less than 1 minute read

Visualizing the count of Event Log events on a computer can be helpful in some cases: starting to investigate an issue - does the issue coincide with an i...