topic For the record this is how I in Network Security

User Cert Lockout

Mark H — Tue, 12 Mar 2019 12:40:17 GMT

Hi everyone,

I (stupidly) enabled the need for user certificates in the system policy for my FireSIGHT Management Centre. How can I disable this using the admin account via CLI?

I have found some instructions (system disable-http-user-cert), but it appears they are for using an ordinary user account. However using the admin account I get a shell prompt instead of a configuration wizard.

Kind regards,

Mark

For the record this is how I

Mark H — Wed, 29 Apr 2015 04:43:51 GMT

For the record this is how I resolved this.

Escalated in to super user, edit /etc/httpd/ssl_certificates.conf and comment out the "SSLVerifyClient require" line and restart.

There is a chance I did the

Brian Hebertson — Tue, 28 Jul 2015 14:49:33 GMT

There is a chance I did the same thing. Thank you for this post it works.

Disabling the option works

jaime.pedraza — Fri, 04 Nov 2016 23:05:43 GMT

Disabling the option works without issues, thanks. Additionally, there is no need to restart the whole system. If you can not do that, the following line restart the gui and it is enough to recover the access: pmtool restartbytype gui

Re: User Cert Lockout

cisco_kiwi — Mon, 23 Oct 2017 19:19:43 GMT

I have managed to do the same thing. They only problem I have now is when I logon to the CLI I am not able to run any of the commands.

If I try I get

sh: edit : command not found or sh: show: command not found

I am logged in as the root user. Any ideas how I can run the commands?