Wondering how to resolve the onapp YubiKey authentication failure issue? We can help you with this!

As part of our Server Virtualization Technologies and Services, we assist our customers with several OnApp queries.

Today, let us see how our support techs help our customers to fix the onapp YubiKey authentication failure issue.

 

OnApp YubiKey authentication failure

 
We will receive the following error when we try to log in to the OnApp under the admin account protected with Yubikey:

Service is temporarily unavailable and Invalid Yubikey

This authentication failure is due to expired certificate inside ‘Yubikey’ gem. We need to update the certificate chain to resolve the issue.
 

For OnApp version 5.0 to 5.4

1. Firstly, we need to download the chain.pem file to CP from YubiKey Authentication page.

2. Then we should change the owner of the patched .pem file.

# chown root:root #pem_file_location#

3. After that we need to locate and take a backup of the current chain.pem file.

# find /usr/lib*/ruby -name \*chain.pem
/usr/lib64/ruby/gems/2.1.0/gems/yubikey-1.4.1/lib/cert/chain.pem
# cp -av /usr/lib64/ruby/gems/2.1.0/gems/yubikey-1.4.1/lib/cert/chain.pem /usr/lib64/ruby/gems/2.1.0/gems/yubikey-1.4.1/lib/cert/chain.pem.bak

4. Now put into place new chain.pem file.

# cp -av #pem_file_location# /usr/lib64/ruby/gems/2.1.0/gems/yubikey-1.4.1/lib/cert/chain.pem

5. Finally restart the OnApp Control Panel services like onapp, httpd.
 

For OnApp 5.5  to  6.0

 
1. At first, run the following command:

# yum update rubygem-yubikey

2. Then restart OnApp Control Panel services like onapp, httpd.
 

For OnApp versions 6.1

 
1. Firstly, run the following command:

# yum update rubygem-onapp-core

2. Then we should restart OnApp Control Panel services like onapp, httpd.
 

For OnApp versions 6.2

 
1. Firstly, we need to download the chain.pem file to CP from YubiKey Authentication page.
2. Then we should change the owner of the patched .pem file

# chown root:root #pem_file_location#

3. After that we need to locate and backup the current chain.pem file

# find /usr/lib*/ruby -name \*chain.pem
/usr/lib64/ruby/gems/2.5.0/gems/yubikey-1.4.1/lib/cert/chain.pem
/usr/lib64/ruby/gems/2.5.0/gems/onapp-core-6.2.3/config/yubikey_cert_chain.pem
# cp -av /usr/lib64/ruby/gems/2.5.0/gems/onapp-core-6.2.3/config/yubikey_cert_chain.pem /usr/lib64/ruby/gems/2.5.0/gems/onapp-core-6.2.3/config/yubikey_cert_chain.pem.bak

4. Now put into place new chain.pem file

# cp -av #pem_file_location# /usr/lib64/ruby/gems/2.5.0/gems/onapp-core-6.2.3/config/yubikey_cert_chain.pem

5. Finally restart OnApp Control Panel services like onapp, httpd.

[Need more assistance with OnApp queries? We’d be happy to assist]
 

Conclusion

 
In short, today we saw how our Support Techs help our customers to fix the YubiKey authentication failure issue.