Error Message: "Invalid or missing authorization token"

After upgrading Reflection for the Web, you may receive an error message when trying to make a secure connection, such as:

• "Missing authorization token,"
• "Invalid or missing authorization token," or
• "A proxy server authorization token was requested from the Reflection server but invalid data was received."

To eliminate the error messages, follow the steps below to generate a new management server certificate.

1. Launch the Administrative WebStation and go to Security Setup > Certificates tab.
2. Under Administer Reflection Management Server Certificate, check the Certificate status. If the certificate has expired, continue with the remaining steps.
3. Select "Delete the self-signed server certificate" and follow the prompts to delete it. (If the certificate is not a self-signed certificate, you will need to obtain a new CA-signed certificate and import it. Continue with step 5 after obtaining a new CA-signed certificate).
4. Select "Generate a new self-signed server certificate." Complete and submit the self-signed certificate form.
5. Import the Management Server Certificate to the Security Proxy:
   1. Launch the Security Proxy Wizard.
   2. On the Trusted Certificates tab, you can import a trusted certificate from a file or directly from the management server over the network. Import the generated certificate from the Reflection management server over the network.
   3. Click Import, and then click the Server button.
   4. Specify (or accept the defaults for) the Reflection management server address, the management server (not the proxy server) HTTP port number, the servlet context, and the friendly name of the Reflection management server.
   5. The context name is used in the URL that accesses the management server, and it is often—although not always—the same as the directory within which the management server is installed. The default context name is rweb.
   6. Click OK.

The expiration date of the management server certificate is being checked. Since certificates are retained during the upgrade process, if the management server certificate is expired, the security proxy authorization token (that is signed by the management server certificate) will result in invalid or missing authorization token error messages.

Legacy KB ID

This document was originally published as Attachmate Technical Note 1956.