IBM Support

TroubleShoot: Administrative console problems in WebSphere Application Server

Troubleshooting


Problem

Use this document to troubleshoot the WebSphere admin console.  This document contains troubleshooting information for administrative console in the WebSphere® Application Server.  This document can help address common issues with this component before you call IBM support and save you time.

Resolving The Problem

There are several articles in IBM Docs to troubleshoot administrative console problems.  Troubleshooting for the administrative console is part of the Troubleshooting administration topic in IBM Docs.  The following subtopics are covered for the administrative console:
 

How do I disable the console timeout?

To disable the administrative console timeout, set the console expiration to -1. To find an example wsadmin script for changing the console timeout, see Changing the console session expiration in IBM Docs.

You can find the current administrative console timeout in the console's deployment.xml file in the (cellRoot)/applications/isclite.ear/deployments/isclite directory.  The console timeout is the value for the invalidationTimeout attribute of the tuningParams element.  For example,

<tuningParams xmi:id="TuningParams_1162483845426" usingMultiRowSchema="false" maxInMemorySessionCount="1000" allowOverflow="true" scheduleInvalidation="false" writeFrequency="TIME_BASED_WRITE" writeInterval="10" writeContents="ONLY_UPDATED_ATTRIBUTES" invalidationTimeout="-1">
 

How do I enable certificate based login?

You can log in to the administrative console with a certificate by configuring CERT_LOGIN as the auth-method and setting the adminconsole.certLogin system property. The adminconsole.certLogin system property disables the use of form login so you are not prompted for login credentials when CLIENT_CERT is configured.
To configure certificate-based login for the WebSphere administrative console, follow the steps in the Certificate login section in the Logging in to the administrative console article in IBM Docs.
 

How do I change the console's logout exit page?

By default, when you click logout on the administrative console, the browser is redirected to https://(host):(adminSecurePort)/ibm/console/login.do .  If you want to redirect to a different URL when you click logout, perform the following actions:
  1. Back up the following file:
    (WAS_HOME)/systemApps/isclite.ear/config/console.properties
  2. Open the following file in an editor:
    (WAS_HOME)/systemApps/isclite.ear/config/console.properties
  3. Change the value for the redirect property to true
  4. Change the value for the redirectURL property to the URL to which you want to redirect when you click logout on the administrative console.  For example, https://acme.co/logoutpage
  5. Save the file.
  6. If the value that you provided for redirectURL is not the same host and one of the ports serviced by the application server profile that hosts your administrative console, perform the following actions:
    1. In the administrative console, navigate to Security > Global security > Custom properties
    2. Make sure that the com.ibm.websphere.security.allowAnyLogoutExitPageHost property is set to true.
    3. Click Save
  7. Restart the server that hosts the console.
image-20231020193456-2 Tip: You can make the browser show something generic when you click logout on the console, like the following:
image-20231020194819-1
This is core security's default logout exit page.  If you want to use this logout exit page with the console, perform the following steps:
  1. In (WAS_HOME)/systemApps/isclite.ear/config/console.properties, set the redirectURL to a URL that is on a different host, for example https://www.ibm.com
  2. Make sure that the com.ibm.websphere.security.allowAnyLogoutExitPageHost security custom property is set to false

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"ARM Category":[{"code":"a8m50000000CdPnAAK","label":"WebSphere Application Server traditional-All Platforms-\u003ESystem Management-\u003ETraditional WAS-\u003EAdmin Console"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
10 January 2024

UID

ibm16986829