Pole-identite (Customer) asked a question.

October 9, 2026 at 8:06 AM
I got an error message in operation console when accessing to webtier status after upgrading webtiers servers from 8.9.0.1.0 to 8.9.0.2.1 : "Unable to verify credentials and/or process the request at this time. Please try again later.".

The updates ok Authentication manager servers and webtiers servers succeeded. The complete error message is "Additional Credentials Required ; There was a problem processing your request.

Unable to verify credentials and/or process the request at this time. Please try again later.

Thanks for your help.

 

Capture d'écran 2026-10-09 100449

  • 6 answers
  • 168 views

  • MarcinBarnas (Customer)

    I had the same issue after upgrading to 8.9 P4. In my case, the problem was resolved by reverting to a certificate issued by CN=RSA Root CA (Not your CA). and activate from Opertaion Console: Deployment Configuration - > Certificates - > Console Certificate Management

     

    If you no longer have that certificate, you will likely need to generate a new one based on a CSR, as the cryptographic algorithms appear to have changed in this version.

     

     

    Expand Post
    Selected as Best

  • EricaChalfin (RSA)

    @Pole-identite (Customer)​ ,

     

    To see what is going on try these steps:

     

    • Is the user name and password you are entering here a super admin user who can access the Security Console? Please confirm that user can login to the Security Console.
    • Is that super admin user in the internal database or an external identity source? If not, please test access with a super admin user who is in the internal database.
    • If that fails, have another super admin user check your test account's lockout status, password, and console authentication settings—the checks identified in RSA’s Unable to login to RSA Authentication Manager Security Console as super admin. 
    • Also sign out and open a private/incognito window.
    • Have you tried logging in with a different super admin account?
    • Test another Operations Console action that requests additional credentials.

     

    If you still have a failure, gather the troubleshooting logs for review and check whether the Self-Service Console remains accessible.

     

    If you need additional assistance, please open a support case and we will be happy to assist.

     

     

     

     

     

    Expand Post

    • Pole-identite (Customer)

      The user name and password that I am using is a super user admin. This user can login to the Security Console. It belongs to the internal database.

      The problem is the same when using an incognito window.

      All other Operations Console action that requests additional credentials (Download troubleshooting files, Radius Servers) have the same behavior.

      The Self-Service console remains accessible.

  • MarcinBarnas (Customer)

    I had the same issue after upgrading to 8.9 P4. In my case, the problem was resolved by reverting to a certificate issued by CN=RSA Root CA (Not your CA). and activate from Opertaion Console: Deployment Configuration - > Certificates - > Console Certificate Management

     

    If you no longer have that certificate, you will likely need to generate a new one based on a CSR, as the cryptographic algorithms appear to have changed in this version.

     

     

    Expand Post
    Selected as Best

    • Pole-identite (Customer)

      Thank you for your response; we have rolled back the two servers where we encountered the issue, so unfortunately, I am no longer able to verify it. However, as things stand, I can see that the certificates are issued by RSA Root CA. I will keep your suggestion in mind, should the problem arise again.

    • Pole-identite (Customer)

      Hello

      I have the same issue again on another server.

      Following the upgrade from version 8.9.0.4.0 to version 8.9.0.5.0, the same message appears on the operation console :

      "Unable to verify credentials and/or process the request at this time. Please try again later."

      However, the update itself completed successfully and the certificate was indeed issued by CN=RSA Root CA

      How did you go about regenerating the certificate using the internal certificate authority ?

      Thank for advance.

      Expand Post

Don't see what you're looking for?