SSPR Writeback Issue: "A call to SSPI failed" Error with CommunicationException

Arun 0 Reputation points
2025-01-09T21:22:59.4733333+00:00

Hello Community,

I am facing an issue with SSPR (Self-Service Password Reset) writeback functionality. The error log indicates a problem with the communication between the client and the server, stating they "do not possess a common algorithm." as both TLS 1.2 and 1.3 are enabled for both client and server and there are no blocker from **.passwordreset.microsoftonline.com and .servicebus.windows.net network connection

Any insights or guidance would be greatly appreciated.

Error details:
TrackingId: f84409eb-8efc-467-a12-1af76246f, Listener for Namespace: ssprdedicatedsbprodeus2-1, Endpoint: 5a9a9255-4f8d-96eb-dba7f0bd47b8_5572cfb-c116-4f82-8a37-bc159005d44 offline Event. Last error encountered System.ServiceModel.CommunicationException: A call to SSPI failed, see inner exception. ---> System.IO.IOException: A call to SSPI failed, see inner exception. ---> System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception. ---> System.ComponentModel.Win32Exception: The client and server cannot communicate, because they do not possess a common algorithm

   --- End of inner exception stack trace ---

   at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

   at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest, Boolean renegotiation)

   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)

   at System.Net.Security.SslStream.BeginAuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, SslProtocols enabledSslProtocols, Boolean checkCertificateRevocation, AsyncCallback asyncCallback, Object asyncState)

   at System.Net.Security.SslStream.BeginAuthenticateAsClient(String targetHost, AsyncCallback asyncCallback, Object asyncState)

   at Microsoft.ServiceBus.ServiceBusClientWebSocket.ConnectAsyncResult.<>c__DisplayClass23_0.<GetAsyncSteps>b__2(ConnectAsyncResult thisPtr, TimeSpan t, AsyncCallback c, Object s)

   at Microsoft.ServiceBus.Messaging.IteratorAsyncResult`1.EnumerateSteps(CurrentThreadType state)

   --- End of inner exception stack trace ---

   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at Microsoft.ServiceBus.Common.AsyncResult.EndTAsyncResult

   at Microsoft.ServiceBus.ServiceBusClientWebSocket.EndConnect(IAsyncResult result)

   at Microsoft.ServiceBus.Messaging.IteratorAsyncResult`1.StepCallback(IAsyncResult result)

   --- End of inner exception stack trace ---

   at Microsoft.ServiceBus.RelayedOnewayListener.RelayedOnewayAmqpListenerClient.AmqpRelayedConnection.Open(TimeSpan timeout)

   at Microsoft.ServiceBus.RelayedOnewayListener.RelayedOnewayAmqpListenerClient.GetOrCreateConnection(Uri via, TimeSpan timeout)

   at Microsoft.ServiceBus.RelayedOnewayListener.RelayedOnewayAmqpListenerClient.Connect(TimeSpan timeout)

   at Microsoft.ServiceBus.RelayedOnewayTcpClient.EnsureConnected(TimeSpan timeout, Boolean isRetry), Details: Version: 5.0.922.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,799 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,836 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Andy David - MVP 151.1K Reputation points MVP
    2025-01-11T19:36:46.6033333+00:00

    What happens if you disable TLS 1.3?

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.