Announcements

SecurID® Discussions

Browse the SecurID discussion board to get product help and collaborate with other SecurID users.
GuyTeguia
Beginner
Beginner

URL unavailable

Jump to solution

I have deployed AM 8.1.

Quick setup went well (successfully completed). but I'm unable to launch any of the consoles (Security or Operations)  keep getting  "cannot display the webpage".

- I have added the 2 URLs on the trusted side,

- I have rebooted the servers, and I have waited 2 hours

- I haven't checked the DNS yet

Labels (1)
0 Likes
1 Solution

Accepted Solutions
EdwardDavis
Employee
Employee

Hello,

 

Base 8.1 has certain ciphers it accepts, and others it flags as illegal.

 

Most recent browsers have an issue with 8.1 base (fixed if you go to 8.1 sp1 patch 2 or higher) since the browser companies are trying to protect you from SSL vulnerabilities discovered in the past two years and now do not negotiate all the ciphers they used to 'back in the day'.

 

The easiest thing to do is find a copy of FirefoxPortable below version 36. This doesn't install, it just runs from an exe, but FirefoxPortable 35 and lower will work, and then with it you can install sp1 then sp1 patch 15, which fixes the cipher issue. Otherwise you can try to find a setting for your browser that will work. But the underlying issue is most current browsers are trying to protect you from certain SSL vulnerabilities... and even though 8.1 is no threat, the browser is not letting the connection happen (actually it is 8.1 refusing to negotiate the session).

 

Of course if you find and download FirefoxPortable,  scan it and be sure it is a 'trusted source'. I am not recommending FirefoxPortable for any reason other than it is typically bundled by version number so it's relatively easy to just get a copy and quickly patch 8.1.

 

 

Also, FYI

 

these are the possible URL's for 8.1/8.2

Most require the FQDN only.

Ops console will allow both IP or FQDN.

 

security console

https://f.q.d.n/sc

https://f.q.d.n:7004/console-ims

 

self-service console

https://f.q.d.n/ssc

https://f.q.d.n:7004/console-selfservice

 

operations-console

https://f.q.d.n/oc

https://f.q.d.n:7072/operations-console

https://ip.address/oc

https://ip.address:7072/operations-console

View solution in original post

1 Reply
EdwardDavis
Employee
Employee

Hello,

 

Base 8.1 has certain ciphers it accepts, and others it flags as illegal.

 

Most recent browsers have an issue with 8.1 base (fixed if you go to 8.1 sp1 patch 2 or higher) since the browser companies are trying to protect you from SSL vulnerabilities discovered in the past two years and now do not negotiate all the ciphers they used to 'back in the day'.

 

The easiest thing to do is find a copy of FirefoxPortable below version 36. This doesn't install, it just runs from an exe, but FirefoxPortable 35 and lower will work, and then with it you can install sp1 then sp1 patch 15, which fixes the cipher issue. Otherwise you can try to find a setting for your browser that will work. But the underlying issue is most current browsers are trying to protect you from certain SSL vulnerabilities... and even though 8.1 is no threat, the browser is not letting the connection happen (actually it is 8.1 refusing to negotiate the session).

 

Of course if you find and download FirefoxPortable,  scan it and be sure it is a 'trusted source'. I am not recommending FirefoxPortable for any reason other than it is typically bundled by version number so it's relatively easy to just get a copy and quickly patch 8.1.

 

 

Also, FYI

 

these are the possible URL's for 8.1/8.2

Most require the FQDN only.

Ops console will allow both IP or FQDN.

 

security console

https://f.q.d.n/sc

https://f.q.d.n:7004/console-ims

 

self-service console

https://f.q.d.n/ssc

https://f.q.d.n:7004/console-selfservice

 

operations-console

https://f.q.d.n/oc

https://f.q.d.n:7072/operations-console

https://ip.address/oc

https://ip.address:7072/operations-console