User is required to use client certificate login

Products

• CA API Gateway

Issue/Introduction

Policy manager login failed with the warning message "User is required to use client certificate login".

Environment

API Gateway

Cause

• The user ID being used for logging in to the policy manager is configured with certificate authentication.
• The user ID in the internal identity provider has certificate linked

Resolution

Solution 1:

• If you have the certificate for the user then use that certificate
• You can add the certificate by clicking manage button on the policy manager login screen
  • 

 

Solution 2:

• If you have an internal user with a cert attached then the policy manager login will always use the cert (irrespective of what is configured as client auth).
• You can run this command and check the output for the user: select * from ssg.client_cert\G;
• If you see the user listed in this output then that user has a cert added in the internal identity provider
• You can use this user only with the cert
• If you do not want to use the cert then you must use a different user (who does not have a cert in the client_cert table)
• OR you can delete the cert for this user using REST API and then use this user ID for logging in