SMG console requesting choose certificate

[Thiago Alves]

Hello peoples,

We have a litle problem with our SMG, when we access SMG control center URL, we are receiving a message to choose the certificate to stabelish connection with console.

Our SMG version is 10.73-5.

I attached message.

Best Regards,

Thiago.

[Steven R]

Thiago - 

Have you tried to access the web interface with Firefox? There is an issue with 10.7.3-5 where it requests a client certificate. 

Cannot connect to SMG Control Center after update to 10.7.3
https://knowledge.broadcom.com/external/article?articleId=184848

------------------------------
Strategic Support Engineer
Broadcom
------------------------------

[alexander smg]

I got screwed by this as well.

[alexander smg]

I just tried that and it still does not work.  Why the hell is it doing this.  I have other 10.7.3-5 gateways that have zero problems.  THis is stupid.  Can this be fixed another way please.

thanks

[Steven R]

It has to do with the browser. If the browser has a client certificate, then the messaging gateway will take it and try to verify it. If the verification fails, then you won't be able to access the web interface.

If there is no client certificate then no client certificate check will take place and you will be able to access the interface.

If you are prompted to select a certificate by your browser when you try to login to the control center, click cancel and it should allow you in.

The other option is, if you can get into the web interface once with another browser, you can install the CA cert for your client certificate in (Administration > Smart Card > CA certificates)

------------------------------
Strategic Support Engineer
Broadcom
------------------------------

[John Doe]

HI

This isn't an option for us, a number of users have certificates provided by third parties (government etc) so we can not be expected to install the CA cert for all of these providers. Also some of the providers will not want to give out their CA Certs.

Please provide an option to turn this feature off.

[John Doe]

HI

We are having the same issue.

we have a number of users with certificates provided by third parties (government etc) we cannot be expected to install the CA cert for all of these providers.
Also the third parties may not want to give us the CA certs.

Please provide an option to disable certificate login.

[Thiago Alves]

Hi Steven R,

I did test in FireFox and I can't see this message to choose certificate.

I go ahead to do stepes describided in this KB https://knowledge.broadcom.com/external/article?articleId=184848

Thank so much, see you more late.

Best Regards,

Thiago

[Thiago Alves]

Hi Steven,

Thank's so much, my issue was fixed following your intructions.

Regards,

Thiago.

[Steven R]

Patch 281 has been released for SMG 10.7.3-5 which addresses this issue.

You can install the patch by following the instructions in the help file.

https://help.symantec.com/cs/SMG_10_7_0/SMG/v121057057_v132085995/patch?locale=EN_US

------------------------------
Strategic Support Engineer
Broadcom
------------------------------

[alexander-smg]

I don't see the patch

[Steven R]

You can view the available patches by running "patch list" at the command line.

Then you can follow the steps in the document linked above to download and install the patch from the servers.

Release information can be found:
https://knowledge.broadcom.com/external/article?articleId=151063

------------------------------
Strategic Support Engineer
Broadcom
------------------------------