000038771 - 500 Internal server error; users fail to log in using RSA Archer Mobile 1.0 when connecting to RSA Archer 6.7

Document created by RSA Customer Support Employee on Apr 23, 2020Last modified by RSA Customer Support Employee on Apr 23, 2020
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000038771
Applies ToRSA Product Set: RSA Archer
RSA Product/Service Type: RSA Archer
RSA Version/Condition: 6.7
RSA Product/Service Type: RSA Archer Mobile
RSA Version/Condition: 1.0

IssueCustomers upgrading from a version of RSA Archer lower than 6.7 directly to,, or are not able to log in to RSA Archer 6.7.x using RSA Archer Mobile 1.0.

Only customers who have installed or or are impacted. These users fail to log in using RSA Archer Mobile 1.0 and see the following error:
The Login API returns – 500 Internal Server Error.

As in the attached Windows Event Viewer log, the server Event Viewer shows the following exception:


Could not load file or assembly 'System.Web.Http, Version=, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies.


The following error is seen on the RSA Archer Mobile 1.0 app:

Error screen
CauseThis error occurs because the web.config file is missing from the RSA Archer web server folder.

Customers with the following versions of RSA Archer should have the web.config file installed and not experience an issue:
  • Those who are on the base version of RSA Archer 6.7.
  • Those who upgraded from RSA Archer 6.7 base version to RSA Archer or or
  • Those who are on RSA Archer or later (such as RSA Archer
ResolutionTo resolve the issue, upgrade to RSA Archer or later, as the correct files are contained in that release. 

Alternatively, users on RSA Archer,, or can add the attached web.config file using the steps below. If this process is done, the user does not need to upgrade to or later.


  1. Download the web.config file from this article.
  2. On the RSA Archer web server, go to C:\inetpub\wwwroot\RSAarcher\mobileapi\.
  3. Verify that the web.config file does not exist.
  4. Paste the new web.config into the mobileapi folder.

If you have multiple web servers under a load balancer, apply this change to all web servers.