Troubleshooting User Lock Out

When using the client certificate feature, these situations can lock the user out of the SonicWall Security Appliance:

• Enable Client Certificate Check is checked, but no client certificate is installed on the browser.
• Enable Client Certificate Check is checked and a client certificate is installed on the browser, but either no Client Certificate Issuer is selected or the wrong Client Certificate Issuer is selected.
• Enable OSCP Checking is enabled, but either the OSCP server is not available or a network problem is preventing the SonicWall Security Appliance from accessing the OSCP server.

To restore access to a user who is locked out, the following CLI commands are provided:

• web-management client-cert disable
• web-management ocsp disable