fighting for truth, justice, and a kick-butt lotus notes experience.

Traveler HA running on MS SQL Server issue with TLS 1.2 and travelerutil command

 5 April 2019 17:57:17
Last week I installed a new Traveler HA environment at customer side.

We started with Traveler on Domino 10.0.1 from scratch with a Microsoft SQL Server in the back.

When running the travelerutil command to configure the MS SQL connection, we were not able to connect to the MS SQL system seeing the following error: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption

The reason for the error, was quickly found and IBM published a matching Technote 2 day earlier on 27th of March.

The MS SQL server is now using TLS 1.2 by default.

The root cause of the issue is the IBM JVM being used by the Domino server for both the HTTP and Traveler tasks.  By default, the IBM JVM tries to use TLS 1.0 and does not retry using TLS 1.2 unless certain JVM options are specified.

If you have an existing Traveler service pool and MS SQL server in the back and your MS SQL admin enabled TLS 1.2, you will be in trouble.

You will have to launch the Domino JVM with an additional JVM option:

The IBM Technote explains the three needed steps in detail:

Step 1:

Create a new file in the domino_data/traveler/cfg folder containing:

Step 2:

Set the following notes.ini JavaUserOptionsFile property to point to the new file created in Step 1


Linux:  JavaUserOptionsFile=/local/notesdata/traveler/cfg/
Windows:   JavaUserOptionsFile=C:\Program Files\Domino\data\traveler\cfg\

Note: If JavaUserOptionsFile parameter already specifies a JVM Options file, simply append this setting the JVM Options file already being used:

Step 3:

Set the notes.ini NTS_JAVA_PARMS property on all Traveler servers.

Note:  If NTS_JAVA_PARMS is already defined, add a space and to the existing value.  

So we created the file and added the JavaUserOptionsFile and NTS_JAVA_PARMS notes.ini properties, restarted the server,  but the travelerutil tool still did not work.

The traveler util is a simple commandline script executing a Java program.

To get it working you will have to add the option to the travelerutil script, too.

Here is an example:  Red marked - what and where we add the option

@echo off

pushd "E:\Lotus\Domino\data"


set PATH=D:\Lotus\Domino;D:\Lotus\Domino;%PATH%

"D:\Lotus\Domino\jvm\bin\java.exe" -cp "D:\Lotus\Domino\Traveler\lib\*""E:\Lotus\Domino\data" com.lotus.sync.util.OfflineUtilities "D:\Lotus\Domino" "E:\Lotus\Domino\data" "D:\Lotus\Domino\notes.ini" %*


After the changes all works fine :-)