【未解决】POWER BI desktop连接到Google big query报错。怎么解决?

报错：

Details: "ODBC: ERROR [HY000] [Microsoft][DriverSupport] (1160) Cannot enable SSL for the connection when connecting to a server that has not enabled SSL. If the server has SSL enabled, please check if it has been configured to use a SSL protocol version that is lower than what is allowed for the connection. The minimum SSL protocol version allowed for the connection is: TLS 1.2.
ERROR [HY000] [Microsoft][DriverSupport] (1160) Cannot enable SSL for the connection when connecting to a server that has not enabled SSL. If the server has SSL enabled, please check if it has been configured to use a SSL protocol version that is lower than what is allowed for the connection. The minimum SSL protocol version allowed for the connection is: TLS 1.2."

 

Kindly check below link to know is TLS 1.2 enabled on server.

https://docs.rackspace.com/support/how-to/enabling-tls-1.2-on-windows-server/

https://thesecmaster.com/how-to-enable-tls-1-2-and-tls-1-3-on-windows-server/
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-server

To enable SSL on server kindly check below link.
https://www.ionos.com/help/ssl-certificates/setting-up-user-managed-ssl-certificates/installing-an-ssl-certificate-on-a-windows-server/

 

 TLS Protocols Supported by Windows Operating Systems:

Windows OS	TLS 1.0 Client	TLS 1.0 Server	TLS 1.1 Client	TLS 1.1 Server	TLS 1.2 Client	TLS 1.2 Server	TLS 1.3 Client	TLS 1.3 Server
Windows Vista/Windows Server 2008	Enabled	Enabled	Not supported	Not supported	Not supported	Not supported	Not supported	Not supported
Windows Server 2008 with Service Pack 2 (SP2)	Enabled	Enabled	Disabled	Disabled	Disabled	Disabled	Not supported	Not supported
Windows 7/Windows Server 2008 R2	Enabled	Enabled	Disabled	Disabled	Disabled	Disabled	Not supported	Not supported
Windows 8/Windows Server 2012	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 8.1/Windows Server 2012 R2	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1507	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1511	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1607/Windows Server 2016 Standard	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1703	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1709	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1803	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1809//Windows Server 2019	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1903	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 1909	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 2004	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not supported	Not supported
Windows 10, version 20H2	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not Supported	Not Supported
Windows 10, version 21H1	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not Supported	Not Supported
Windows 10, version 21H2	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Not Supported	Not Supported
Windows Server 2022	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled
Windows 11	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled

Installing an SSL Certificate on a Windows Server

Prerequisites

• Order SSL Certificate
• Generate PFX File

Step 1 Log in to your server using Remote Desktop.

Step 2 Open IIS Manager by clicking Start > Administrative Tools > Internet Information Services (IIS) Manager

Step 3 Double-click the computer name at the top-left of the window.

Step 4 On the right-hand side, scroll down and double-click the Server Certificates icon.

Step 5 On the top-right of the Actions pane, click the Import link.

Step 6 In the new window, click the ellipsis (...) button to locate the .pfx file on the server. Enter the password you chose when generating the PFX file into the text box. Also, check the box for Allow this certificate to be exported. When finished, click the OK button.

Step 7 You will see the certificate added to IIS on the right-hand side. Next, click Sites on the left-hand side.

Step 8 Double-click the web site that the SSL is for.

Step 9 On the right-hand side, click the Bindings link.

Step 10 Click the Add button.

Step 11 Select https from the Type drop-down box.

Step 12 Select the IP address from the drop-down box that the domain uses if you plan to install more than one SSL certificate.

Step 13 From the SSL certificate drop-down box, select the certificate you just added. Optionally, you can choose change the port number for the binding however it is recommended to leave the deafult 443.

Step 14 Click the OK button when you are finished

 

Method 2 : Enable TLS 1.2 and TLS 1.3 on Windows Server using Powershell Commends

Follow this simple procedure to enable TLS 1.2 and TLS 1.2 using Powershell comments.

1. Open Powershell as Administrator

 

2. Run below commands to create Registry entry

TLS 1.2
- New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Force

- New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' –PropertyType 'DWORD' -Name 'DisabledByDefault' -Value '0'

- New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -PropertyType 'DWORD' -Name 'Enabled' -Value '1'



- New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force

- New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' –PropertyType 'DWORD' -Name 'DisabledByDefault' -Value '0'

- New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' –PropertyType 'DWORD' -Name 'Enabled' -Value '1'



TLS 1.3 (Supports in Windows 11 & Windows Server 2022) 
- New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\services\HTTP\Parameters' -PropertyType 'DWORD' -Name 'EnableHttp3' -Value '1'

 

Before running the commands you can see no items were exist underneath Protocol.

After running the commands you can see there are two keys created ‘TLS 1.2’ & ‘TLS 1.3’, Underneath each protocols there are ‘Client’ &’Server’ Keys inside them ther are two items ‘DisableByDefault’ & ‘Enabled’.

 

 other ref: https://sql.info/d/cannot-enable-ssl-for-the-connection-tls-1-2-error-in-big-query-using-simba-odbc-driver