Article Number
000039111
Applies To
Product(s): Archer
Version(s): All Versions
Primary Deployment: On Premises
Description
When attempting to browse the Archer URL, a popup message displays asking the user to select a certificate to authenticate to. It displays a list of certificates local to the workstation. If the user clicks Cancel or x, they are taken to Archer, else an HTTP 403 error occurs.
0EMVM000005Ue0L.png
0EMVM000005Ue0L.pngCause
Client-certificate authentication can be optional, mandatory, or not used at all.
-
Ignore is when it's not used at all.
-
Accept will take a certificate if it's presented, but will also continue with connections where the client doesn't present one.
-
Require only continues with connections that have a client certificate.
The default SSL settings in IIS have changed from 'Ignore' client certificates to 'Require' client certificates causing intermittent problems for some users and not others.
Resolution
Change the SSL Settings to Ignore client certificates:
0EMVM000004pTk1.jpg
0EMVM000004pMx4.jpg
- Open IIS.
- Select the Archer website.
- Open SSL Settings.
- Under Client Certificates, select the Ignore option.
- Recycle your App Pool and re-launch your browser to test.
0EMVM000004pTk1.jpg0EMVM000004pMx4.jpg