User Cert Lockout

[Mark H]

Hi everyone,

I (stupidly) enabled the need for user certificates in the system policy for my FireSIGHT Management Centre. How can I disable this using the admin account via CLI?

I have found some instructions (system disable-http-user-cert), but it appears they are for using an ordinary user account. However using the admin account I get a shell prompt instead of a configuration wizard.

Kind regards,

Mark

[Mark H]

For the record this is how I resolved this.

Escalated in to super user, edit /etc/httpd/ssl_certificates.conf and comment out the "SSLVerifyClient require" line and restart.

[Brian Hebertson]

There is a chance I did the same thing. Thank you for this post it works.

[jaime.pedraza]

Disabling the option works without issues, thanks. Additionally, there is no need to restart the whole system. If you can not do that, the following line restart the gui and it is enough to recover the access: pmtool restartbytype gui

[cisco_kiwi]

I have managed to do the same thing. They only problem I have now is when I logon to the CLI I am not able to run any of the commands.

If I try I get 

sh: edit : command not found or sh: show: command not found

I am logged in as the root user. Any ideas how I can run the commands?