Administer > Configure NNMi to Support Public Key Infrastructure User Authentication > Troubleshooting PKI User Authentication Issues

Troubleshooting PKI User Authentication Issues

During PKI user authentication, a user might encounter an error. See the following table for a listing of errors and possible causes.

PKI User Authentication Errors and Possible Causes
Error Message Possible Cause
401 Not Authenticated

Use of HTTP rather than HTTPS.

User does not have a certificate.

See Manage Certificates for more information.

User certificate is not trusted by a CA in the nnm-trust.p12.

See Manage Certificates for more information.

User certificate is expired or not yet valid.

See Manage Certificates for more information.

User certificate has been revoked or revocation check failed.

See Manage Certificates for more information.

User certificate failed a constraint check.

See Configuring NNMi to Restrict Certificates Used for NNMi Logon Access for more information.

403 Not Authorized

Mapped user name does not exist in NNMi or the LDAP directory service.

See Configure NNMi for PKI User Authentication (X.509 Certificate Authentication) for more information.

Certificate principal to user name mapping is incorrect.

See Configure NNMi for PKI User Authentication (X.509 Certificate Authentication) for more information.

User is not in a user group that provides access to the NNMi console.

See Configuring Security in the NNMi help for more information.

Note To troubleshoot, disable HTTP access and turn on logging to help identify issues.