000036029 - After 6.x upgrade, users cannot save their profile changes due to 404 or 405 error in RSA Archer

Document created by RSA Customer Support Employee on Feb 21, 2018•Last modified by RSA Customer Support Employee on Jul 17, 2019
Version 2Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000036029
Applies ToRSA Product Set: RSA Archer
RSA Product/Service Type: RSA Archer (On-Premise)
RSA Version/Condition: 6.x
Platform: Windows
Product Name: RSA-Archer
Product Description: RSA Archer Platform
Issue

When users log in and attempt to save changes to their user profile, the save button does not work. 

"405 Method Not Allowed" is found in the IE11 network trace 

OR

"404 File Not Found" is found in the IE11 network trace 
User-added image

 



Cause

The issue is caused because Archer now uses the "PUT" method to the Archer RESTful Services API for saving changes on the user profile page and this method may have been previously configured to be blocked in IIS.

ResolutionThere are several places where the "PUT" method may be blocked.

Default Web Site location:
  • IIS Manager -> Sites -> Default Web Site -> Request Filtering -> HTTP Verbs -> If the "Put" verb is listed, remove it from the list.
User-added image
Archer Site Location:
  • IIS Manager -> Sites -> Default Web Site -> RSAArcher -> HTTP Verbs -> If the "Put" verb is listed, remove it from the list.

3rd Party Module installed into IIS and used for Single Sign-On, Authentication, or Security Controls.
  • See the documentation of 3rd party module to allow the "PUT" verb to the Archer site or disable the module (IIS Manager -> Modules).

IMPORTANT: While Archer has security layers to verify the "PUT" method is used safely on the Archer site, other sites on the same web server may not have such security, and may still require having the "PUT" method blocked for security reasons.

Attachments

    Outcomes