CB Protection: Okta The Username or Password is Incorrect

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Unable to log in with error message "username or password is incorrect" after integrating Okta
• PHPErrors.log states:
  • API Error from page 602: POST <ServerName>/api/bit9platform/restricted/identityProvider/ with params {"name":"Okta","entityId"
  • "Cannot insert the value NULL into column 'as_string', table 'das.dbo.certificate_binary'; column does not allow nulls. INSERT fails.\r\nThe statement has been terminated."

Environment

• CB Protection Console: 8.1.0 and Higher
• Okta
• Microsoft .NET Frameworks: 4.7.1 and below

Cause

A defect in Microsoft .NET Frameworks breaks the Okta certificate communication

Resolution

Upgrade Microsoft .NET Frameworks to 4.7.2 or above

Additional Information

• https://community.carbonblack.com/t5/Knowledge-Base/CB-Protection-Collecting-Historical-Logs-Locally-for/ta-p/49865
• To confirm the current Microsoft .NET Frameworks version, use command:

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild -version