Host header or IP address binding causes web console login errors in Operations Manager

This article helps you work around an issue where you receive login errors when installing the web console in System Center Operations Manager version 1801, 1807, 2019, or 2022.

Original product version:   System Center Operations Manager
Original KB number:   4469591

Symptoms

When you install the web console in System Center Operations Manager, you receive the following error message when you select the Use Windows Authentication sign-in option:

The user credentials are invalid or user does not have permissions...

If you instead select the Use Alternate Credentials sign-in option, you receive the following error message after you enter credentials in the form:

The remote server returned an error: (404) Not Found.

Cause

This problem can occur when you configure a specific IP address or host header in the bindings of the web console website.

The problem occurs because web console consists of two separate web applications, OperationsManager and MonitoringView. Both web applications run as virtual directories under the same website. During login, the OperationsManager application makes an outbound request to the MonitoringView application's Login.aspx page. The hostname in this request is hard-coded as localhost. If the website has a host header or isn't bound to the loopback address, the site can't service the localhost request. Therefore, the site returns the 404 message.

Workaround

If you bind the web console website to a specific IP address or use a host header, create additional bindings on the website for the same ports by using the loopback address or the localhost hostname, depending on the scenario.

Specifically, assume that you configure the following HTTP and HTTPS bindings:

Type	IP address	Port	Host name
HTTP	<specific IP address>	80
HTTPS	<specific IP address>	443

In the above bindings, host name is left blank.

In this scenario, you also must configure the following two bindings:

Type	IP address	Port	Host name
HTTP	[::1]	80
HTTPS	[::1]	443

Note

Recent Windows versions use [::1] for the loopback address by default. If you have disabled IPv6 by using the DisabledComponents registry value, use 127.0.0.1 in the binding.

Additionally, assume that you configure the following HTTP and HTTPS bindings:

Type	IP address	Port	Host name
HTTP	All unassigned	80	<host name>
HTTPS	All unassigned	443	<host name>

In the above bindings, <host name> is the DNS name of the web server.

In this scenario, you also must configure the following two bindings:

Type	IP address	Port	Host name
HTTP	All unassigned	80	localhost
HTTPS	All unassigned	443	localhost