---
title: "EPM Windows installer cannot negotiate a secure connection with Segura™ Platform"
slug: "epm-windows-installer-cannot-negotiate-a-secure-connection-with-segura-platform"
updated: 2026-11-03T20:27:33Z
published: 2026-11-03T20:27:33Z
canonical: "docs.senhasegura.io/epm-windows-installer-cannot-negotiate-a-secure-connection-with-segura-platform"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# EPM Windows installer cannot negotiate a secure connection with Segura™ Platform

The EPM Windows installer blocks the installation because it cannot negotiate TLS 1.2 or TLS 1.3 with Segura™ Platform on port `443`. This document covers EPM Windows 4.2.17.

## Symptom

- The installer stops with a message saying it could not negotiate a secure connection. The message says Segura® Platform must accept TLS 1.2 or TLS 1.3 on port `443`. EPM Windows is not installed.
- The Windows Event Viewer records the error in the **EPM** log, usually with event ID `18001`. The **Details** part of the event shows the reason.

### Cause 1: Segura™ Platform does not offer TLS 1.2 or TLS 1.3

Segura® Platform accepts neither TLS 1.2 nor TLS 1.3, so the installer finds no protocol version in common.

### Solution: Enable TLS 1.2 or TLS 1.3 on Segura™ Platform

1. Enable TLS 1.2 or TLS 1.3 on Segura™ Platform.
2. Run the installer again.

### Cause 2: TLS 1.2 is disabled on the workstation

TLS 1.2 is disabled in the workstation's Windows, for example by a hardening policy.

### Solution: Re-enable TLS 1.2 on the workstation

1. Check that TLS 1.2 is not disabled on the workstation's Windows.
2. Run the installer again.

## For more information

- [EPM Windows agent requirements](/v4-2/docs/epm-windows-requirements)