This security tag was added to the Web.config to enhance security, therefore it is advised to upgrade IIS to version 10 or later to resolve the issue if possible.
As an alternate workaround, the security tag can be commented out of the Web.config file following the guidance below:
1. On the application web servers, navigate to the following directory:
Active Roles:
C:\Program Files\One Identity\Active Roles\7.6\Web\Public
Password Manager:
C:\Program Files\One Identity\Password Manager\Web\SelfService\
2. Backup the Web.config file
3. Comment the security tag as shown below:
<!--requestFiltering removeServerHeader="true"/-->
4. Save the file and perform an IISRESET
5. Repeat on each web server
Enhancement Request 386057 has been created to update product documentation to reflect the IIS 10 requirements.