KB484042: How to fix the "Unsupported curveld: 29" error when accessing bookmarks in MicroStrategy Library

Starting with the release of Strategy ONE (March 2024), dossiers are also known as dashboards.

Description

Strategy Library service provides a menu for Bookmarks, that allows you to store dossier manipulations, such as page switching, filtering, and sorting. When the service is installed on a Windows 2016 machine, and the Bookmarks menu is accessed with SSL enabled on the Intelligence Server, Library throws the following application error: 
"Unsupported curveld: 29"

Steps to reproduce

You should be on a Windows Server 2016 machine where the Intelligence Server is installed.
 

• Launch Strategy Configuration Wizard. 
• On the SSL Configuration dialog, select the Configure SSL checkbox.
• Enter the appropriate certificate and key files, as well as the password and SSL Port for the Intelligence Server. 
  

• Complete the Intelligence Server configuration and close the Configuration Wizard.
• Copy the certificate file mentioned above to the folder where Strategy Library is deployed:

  \webapps\MicroStrategyLibrary\WEB-INF.

• From a web browser, open Library. For example, you can open http://hostname:8080/StrategyLibrary.
• Log in with the appropriate credentials. 
• Open a dossier > Bookmarks icon.
  The application error appears.
  

Why is this happening?

To provide the Bookmarks functionality, Library communicates with the Intelligence Server via REST API. When the "Configure SSL" option is configured, the REST API will first perform a handshake through port 34962. During an SSL handshake, the Intelligence Server chooses TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA from TLS 1.2 cipher suite that is NOT supported by Library as the client. 
You should note that this secure communication chosen by the Intelligence Server uses ECC algorithm. However, when the Intelligence Server is installed on a Windows Server 2016 machine, the default curve order causes the Intelligence server to choose the algorithm not support by Library. As a result, the error message, "Unsupported curveld: 29," appears and the secure communication between Library and the Intelligence Server cannot be established. 
This is a defect from a third-party software that Strategy uses in the Intelligence Server (WinHTTP by Microsoft). The server is not supposed to choose an algorithm unsupported by the client.
 

Solution 

This has been fixed in 2019 Update 7.

Workaround

In Windows 2016, the Intelligence Server selects an unexpected ECC curve that has a higher selection priority than the ones supported by Library. This can be fixed by ensuring that the supported (latter) ECC curve is always selected by the Intelligence Server.
 

• In the Windows 2016 start menu, search for "Group Policy Editor."
• In the Local Group Policy Editor, go to Local Computer Policy > Computer Configuration > Administrative Templates > Network > SSL Configuration Settings.
  

• In the pane on the right, right-click ECC Curve Order > Edit.
• In the ECC Curve Order dialog, select the Enabled radio button. The Options textbox appears.
• In the Options textbox, type the following curve names: NistP256, NistP384, curve25519 (one per line and now new line after the curve name). 
  

• Note: The default curve order gives highest preference to curve25519. This represents curveld: 29 and causes the issue. The steps above addresses the issue by changing the preferred ECC curve order.
  
• Click OK, and restart the Windows 2016 machine.
  Clear your browser cache before attempting to bookmark.