There were some eEM updates in 6.4 specifically for the AAI website, and not the thick client that require an update to the AAI policies within EEM.
The 6.4 Release notes that advised that you must import the latest [Install]/scripts/eEM/JAWSCreate.xml file after upgrading to 6.4.0 or later.
The steps to import this file into the eEM server are here:
You must copy the latest xml file that gets created post upgrade to 6.4.x over to the eEM server, then import into the eEM servers using the safex command.
Sample command below:
safex – u [username] –p [password] –f JAWSCreate.xml
If eEM is on Windows you may need to run the command from the directory like below:
Once this is done you should be able to login to the Web UI with eEM domain users.