"Your Request Cannot Be Processed" Error is a diagnosis that can mean one of many things. The following are the most known causes of the error.
The file paths in this article are for MFA Server versions 4.9.5.1 or newer.
If your version is behind, it is strongly recommended to upgrade. Please see our server upgrade information page for more information.
SSL Certificate Is Expired
If you utilize SSL/HTTPS with your MFA server's URL, this has proven to be one of the leading causes of the error. Check your IIS server certificate to determine if this is the case, then go through the process of renewing it with your preferred certificate authority, if applicable.
Configuration Files Are Misconfigured
There could be an issue with the FQDN used in the configuration files. This can sometimes happen when upgrading to a newer version, and the URL settings have been reverted to a default value (usually the server's original computer name). The following instructions will need to be performed in the following files:
- C:\Program Files\Identity Automation\RapidIdentity MFA\WebSite\ web.config
- C:\Program Files\Identity Automation\RapidIdentity MFA\ServiceSite\ web.config
- C:\Program Files\Identity Automation\RapidIdentity MFA\RestServices\ web.config
- C:\Program Files\Identity Automation\RapidIdentity MFA\API\ web.config
- In an elevated Notepad or text editor, open the files listed above.
- In each file, look for your MFA server's URL. If it's as it should be, there's no fix needed to that file. If you cannot find your usual URL, it might be because it's been changed back to the server's computer name.
- If you find an inconsistency, correct all the occurrences within the file (ctrl+h is the Replace all shortcut in Notepad).
- Note: Be sure the correct protocol is used–either HTTP or HTTPS.
MFA Server Logging Misconfigured
To enable or disable RI MFA server logging, please see our how-to article. If the two possible settings are misspelled or a different word is used entirely, this error will occur.
SQL Database Update Tool Was Not Run
When upgrading, our database update tool is required so the SQL MFA database is up to date with the changes (version, keys, records, etc.).
- Open an elevated command prompt.
- Navigate to C:\Program Files\Identity Automation\RapidIdentity MFA\tools
- Run the following command:
TwoFA.CM.DBUpdate /v
If the update fails to run and errors fill the command prompt, there may be something wrong with SQL or the service account.
SQL
- Check that your SQL service is running.
- Is the service account that's used to connect RI MFA to its SQL database in good standing:
- The password has not expired (it should be set to never expire, but this can be mistakenly changed).
- Does the account have dbo rights to the RI MFA database?
Other Items To Check
- Are all the MFA server dependencies installed?
- If Microsoft's Web Service Enhancement 3.0 is installed, it may not have been installed correctly. Reinstall and select 'Administrator' mode during the install process.
