EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB42738: "A potentially dangerous Request.QueryString value was detected from the client " error appears when trying to generate the client certificate using a browser from MicroStrategy Mobile Certificate Server hosted on Microsoft IIS7


Community Admin

• Strategy


"A potentially dangerous Request.QueryString value was detected from the client " error appears when trying to generate the client certificate using a browser from MicroStrategy Mobile Certificate Server 9.x and 10.x hosted on Microsoft IIS7

SYMPTOM:
Users attempting to setup the Strategy Mobile Certificate Server 9.x and 10.x following the article KB410043: How to configure the MicroStrategy Certificate Server for client certificate authentication for MicroStrategy Mobile 9.x , get the following error when testing the sample URL on a browser.

ka04W00000148efQAA_0EM440000002ADY.png

Sample Code/Error


Server Error in '/<Certificate Server Name>' Application

A potentially dangerous Request.QueryString value was detected from the client (loginParams="<auth><device_id>123...").

CAUSE:
This is not an Strategy Mobile Certificate Server 9.x or 10.x related issue. Microsoft IIS 7 has a request validation security feature that blocks certain web requests it may deem dangerous. 
ACTION:
In order to override the Microsoft IIS7 request validation feature, locate the web.config file under:
Sample Code/Error
C:\Program Files (x86)\MicroStrategy\Mobile Server ASPx\CertificateServer\web.config
Note: Following best practices, save a copy of the file before modifying.
Locate the <system.web> heading and add the parameter
Sample Code/Error

<httpRuntime requestValidationMode="2.0" />

Third Party Software Installation: WARNING:
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability. 
 
Disclaimers and Limitation of Liabilities: Disclaimer:
The utility application is provided "as is" and without warranty of any kind. Strategy Expressly disclaims all warranties, express, implied or statutory, including, without limitation, the implied warranties of merchantability, fitness for a particular purpose, satisfactory quality and noninfringement. 
 
Limitation of Liability:
Strategy shall have no liability to licensee for any damages of any kind, including, but not limited to, liability for direct, indirect, special, incidental or consequential, damages (which shall include, but not be limited to, loss of data or information, loss of revenue or anticipated profits or lost business). 


Comment

0 comments

Details

Knowledge Article

Published:

June 13, 2017

Last Updated:

June 13, 2017