Return
-
Title
The requested page cannot be accessed because the related configuration data for the page is invalid. -
Description
After upgrading or performing a new installation of Active Roles 7.6.x or Password Manager 5.9.x or later, the following error is received when attempting to access the web interfaces:
HTTP Error 500.19 – Internal Server Error
The requested page cannot be accessed because the related configuration data for the page is invalid.
Error Code 0x8007000d
Config Error Unrecognized attribute 'removeServerHeader'
Config Source:
<security>
<requestFiltering removeServerHeader="true"/>
</security> -
Cause
The Internet Information Services (IIS) version installed on the web host is lower than IIS 10.
The attribute removeServerHeader was added in IIS 10 and is unavailable in earlier versions. For more details on Request Filtering and the removeServerHeader attribute, visit the Microsoft article linked below.
Request Filtering -
Resolution
This security tag was added to the Web.config to enhance security, therefore it is advised to upgrade IIS to version 10 or later to resolve the issue if possible.
As an alternate workaround, the security tag can be commented out of the Web.config file following the guidance below:1. On the application web servers, navigate to the following directory:Active Roles:C:\Program Files\One Identity\Active Roles\7.6\Web\PublicPassword Manager:C:\Program Files\One Identity\Password Manager\Web\SelfService\2. Backup the Web.config file
3. Comment the security tag as shown below:<!--requestFiltering removeServerHeader="true"/-->4. Save the file and perform an IISRESET
5. Repeat on each web server
Enhancement Request 386057 has been created to update product documentation to reflect the IIS 10 requirements. -
Additional Information
IIS 10 is the default IIS version included in Windows Server 2016 and later.