Connecting to Enterprise Vault Operations Manager the browser continuously loads the SecurityError.aspx

book

Article ID: 100020243

calendar_today

Updated On:

Cause

To identify issue, review the IIS (Internet Information Services) logs after attempting to access the MonitoringWebApp page:

Opening the page and utilizing the Vault Service Account (VSA) is successful:

GET /MonitoringWebApp - 80 domain\vsa Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 301 0 0
GET /MonitoringWebApp/default.aspx - 80 domain\vsa Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0
GET /MonitoringWebApp/style.css - 80 domain\vsa Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0


Opening the page and utilizing the EVOM User account is unsuccessful:

GET /MonitoringWebApp/default.aspx - 80 domain\EVOMUser Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 302 0 0
GET /MonitoringWebApp/SecurityError.aspx - 80 domain\EVOMUser Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0


Note: No Event error is logged and this unsuccessful attempt will loop in IIS until the page is closed.

Details:
During the unsuccessful attempt, access to the default.aspx page returns a "302 0 0" result.  Per Microsoft:

3xx - Redirection

The client browser must take more action to fulfill the request. For example, the browser may have to request a different page on the server or repeat the request by using a proxy server.

   * 301 - Moved Permanently
   * 302 - Object moved.
   * 304 - Not modified.
   * 307 - Temporary redirect.
 

Resolution

When accessing EVOM, this is routed through the EV RBA (Roles Based Authentication) Manager.  The Authorization Manager is used to give accounts, other than the VSA, permissions to perform various functions in Enterprise Vault.  In order to allow a user to utilize the EVOM website, the account must be part of the 'Power Administrators' Role.

Add the EVOM user to the Power Administrator group using Enterprise Vault PowerShell Cmdlets


 

Issue/Introduction

When attempting to connect to the Enterprise Vault Operations Manager (EVOM) Web page (Monitoring WebApp Virtual directory) with the EVOM User Account, the browser appears to continuously load the SecurityError.aspx page.