RSA ACE/Agent for Web gives access to protected pages when correct passcode is used

3 years ago

Originally Published: 2000-01-19

Article Number

000050035

Applies To

RSA ACE/Agent for Web
RSA ACE/Agent for Windows

Issue

RSA ACE/Agent for Web gives access to protected pages when correct passcode is used
"PASSCODE Accepted" in ACE/Server log
Error: "Cookie rejected. Cookie failed MD5 test." in Windows event log

Resolution

There are occasions where due to other software, permissions of registry keys within NT have been altered away from the advised Microsoft settings.

These permissions are viewed and modified using the 'REGEDT32' utility

(WARNING from Microsoft: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.)

Go to the registry key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\w3svc"

There should be three sets of permissions:

        Administrators                Full Control
        Everyone                Special Access
        SYSTEM                Full Control

These setting should exist on the "w3svc" key and all existing subkeys

If the permissions are wrong, then they can be added back in and the option to "Replace Permission on Existing Subkeys" selected.

Don't see what you're looking for?

Related Articles

Trending Articles