SiteMinder : unable to complete the device registration for WebAuthn

Products

• SITEMINDER

Issue/Introduction

 Below errors seen in the smaccess logs, while executing WebAuthn request flow and unable to complete the device registration..

\[c85d87d4-3d08f2e2-863c145b-dd0934f8-da6dbc13-00] [58] Received WebAuthn Error from agent : NotAllowedError - WebAuthn is not supported on sites with TLS certificate errors. [] [] []

Environment

R12.8 SP9

Cause

It was identified that self signed certificates were used on the Access Gateway server to call the WebAuthn requests

Resolution

CA Signed server certificate with CA certificate chain for enabling the Access Gateway over SSL resolved the issue for executing the WebAuthn device registration flow.

 

Additional Information

Alos ensure you have enabled below Access Gateway's ACO Parameters.

-> Enable UseSecureCookie.

-> Added .ico in the IgnoreExt