Symantec VIP Services return HTTP 401 error.

Products

• VIP Service

Issue/Introduction

HTTP 401 error encountered during Symantec VIP transactions, including VIP Enterprise Gateway, VIP Diagnostics, etc. 

Sample errors seen in the logs:

ERROR "2024-05-19 15:57.647" 10.10.10.10 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=[KeyValuePairServiceStub.getAllKeyValuePairsMap] Failed. HTTP errorCode:401"
ERROR "2024-05-19 15:57.653" 10.10.10.10 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=[SyncInstanceManager:updateInstanceState] Error while fetching KeyValuePairs. Error: Failed. HTTP errorCode:401"
ERROR "2025-05-19 15:29.166 GMT" "[VipDiagnostic:testCloudConnectivityFromIDPsAndLDAPSync] IOException occured while execute request. Error: Connection reset"

Cause

HTTP 401 indicates the VIP client auth certificate sent in the request is not authorized. This can also occur if the VIP certificate has been revoked in VIP Manager.

Resolution

- Confirm that the VIP Certificate actively being used by the application or VIP Enterprise Gateway is valid and not revoked in VIP Manager.

- If using an HTTP proxy, allow all VIP traffic to 'pass through' to the VIP Services unterminated. If necessary, use packet capture to verify the client auth cert serial number in the request matches the expected serial number in VIP Manager.