Error: "Validation of Anti-XSRF token failed. Accessing page: ...<NAME OF AUTOMATION POLI" when editing input parameters in Assign Organizational Group automation policy

Products

• IT Management Suite

Issue/Introduction

After upgrading to ITMS 8.7.1, when creating new automation policies for assigning computers to an organizational group, an error is displayed when clicking on OK after editing input parameters. This error also occurs if a clone of a pre-upgrade policy.

The Notification Server (NS) logs includes this error:

Failed to process web request.

Exception of type 'System.Web.HttpUnhandledException' was thrown.
   [HttpUnhandledException @ System.Web.dll]
   at System.Web.UI.Page.HandleError(Exception)
   at System.Web.UI.Page.ProcessRequestMain(bool, bool)
   at System.Web.UI.Page.ProcessRequest(bool, bool)
   at System.Web.UI.Page.ProcessRequest()
   at System.Web.UI.Page.ProcessRequest(HttpContext)
   at Altiris.NS.UI.Controls.PageCachePage.ProcessRequest(HttpContext)
   at Altiris.NS.UI.AltirisPage.ProcessRequest(HttpContext)

Validation of Anti-XSRF token failed. Accessing page: <NS>/Altiris/AltirisNSAutomation/AutomationPolicyUI/dlgEditActionParamsMapping.aspx?name=<NAME OF AUTOMATION POLICY>&<ACTIONGUID>&<SESSIONKEY>
   [InvalidOperationException @ Altiris.NS.UI.dll]
   at Altiris.NS.UI.AltirisPage.DoCheckToken()
   at Altiris.NS.UI.AltirisPage.DoCheckXsrf()
   at Altiris.NS.UI.AltirisPage.OnPreLoad(EventArgs)
   at System.Web.UI.Page.ProcessRequestMain(bool, bool)
Process: w3wp
Priority: 1, Source: Page.HandleError

Environment

ITMS 8.x

Cause

IIS settings were set too low to allow for token lengths in some situations. 

Resolution

Change the maxRequestLength in these two locations

1. Open IIS Manager on the NS and highlight the server name.
2. Go to Configuration Editor under Mangement
3. Navigate to system.webServer/security/requestFiltering
4. Expand requestLimits
5. Set maxAllowedContentLength to 200000000

Next

1. Go to C:\Program Files\Altiris\Altiris NS Automation\Web, open web.config, find line:
   <!-- Workaround for Etrack incident #2495290 -->
   <httpRuntime executionTimeout="600" maxRequestLength="16200" targetFramework="4.8"/>
   and set maxRequestLength to 200000000.
2. reset IIS and try again.