000036030 - After 6.x upgrade, users cannot delete reports. "Error in deleting report" in RSA Archer

Document created by RSA Customer Support Employee on Feb 21, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036030
Applies ToRSA Product Set: Archer
RSA Product/Service Type: RSA Archer (On-Premise)
RSA Version/Condition: 6.2.0.4
Platform: Windows
Product Name: RSA-0012000
Product Description: Archer Platform
Issue

When users log in and attempt to delete a personal report, the delete button does not work.and a popup that says "Error in deleting report" is displayed.

User-added image

Additionally:



"405 Method Not Allowed" is found in the IE11 network trace 





OR



 



"404 File Not Found" is found in the IE11 network trace 
User-added image

Cause

The issue is caused because Archer now uses the "DELETE" method to the Archer RESTful Services API for deleting reports and this method may have been previously configured to be blocked in IIS.

Resolution

There are several places where the "DELETE" method may be blocked.



 



Default Web Site location:



  • IIS Manager -> Sites -> Default Web Site -> Request Filtering -> HTTP Verbs -> If the "DELETE" verb is listed, remove it from the list.

Archer Site Location:



  • IIS Manager -> Sites -> Default Web Site -> RSAArcher -> HTTP Verbs -> If the "DELETE" verb is listed, remove it from the list.
Archer API location

  • IIS Manager -> Sites -> Default Web Site -> RSAArcher (if applicable) -> API ->  HTTP Verbs -> If the "DELETE" verb is listed, remove it from the list.

3rd Party Module installed into IIS and used for Single Sign On, Authentication, or Security Controls.



  • See the documentation of 3rd party module to allow the "DELETE" verb to the Archer site or disable the module (IIS Manager -> Modules).

IMPORTANT: While Archer has security layers to verify the "DELETE" method is used safely on the Archer site, other sites on the same web server may not have such security, and may still require having the "DELETE" method blocked for security reasons.



 



Attachments

    Outcomes