Why am I seeing Certificate-based authentication log messages without enabling it

edeweese
Tera Contributor

Why am I seeing this message in the logs after upgrading to Rome? "Failed to register PIV/CAC certificate to the user account. Please close your browser, ensure your card is inserted and try again"

We have not activated Certificate-based authentication.

We have been experiencing performance issues since upgrading to Rome. So I am looking for anything out of the ordinary that may be contributing to the performance issues and found this one.

 

2 REPLIES 2

OliverDoesereck
Tera Guru

I noticed the same thing after the upgrade to Rome.

Its all based around this plugin: Set up Certificate-based authentication (servicenow.com)

The thing is, I dont have it activated on my instance.

The property "glide.authenticate.mutual.enabled" gets created with the plugin, unfortunately it doesnt work when set to false without installing the plugin first.

It seems, the PIV/CAC is used in the "Login" Service Portal Widget. The new code isnt very well written as it checks for a field on the portal record. But the field only exists once the plugin is installed, so you cant deactivate it.

Since we dont use the Login widget (we have our own), we removed all instances of the Login Widget. This stopped the messages from appearing.

I guess, if you cant do that, try activating the Plugin and then you can set the property to false AND you have the field on the portal record to disable too

Since I found this while looking for the answer.  Rome Path 9/San Diego should fix this issue.

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1113181