Start a conversation

POP Admin Website 500 Error or Login Just Refreshes


 After installing a Prophet On Premise configuration, the Admin website will either not load, probably with a 500 error.
The page will load, but trying to login just refreshes.


For the 500 error, a line in the Web.conf file in C:\inetpub\wwwroot\prophet\admin\, an X-Frame line is causing trouble.

For http only configurations, the Server was updated with security changes that require https.  The Admin page will load but won’t let you log in.

Solution for 500 error - https configurations

 For the 500 error, edit C:\inetpub\wwwroot\prophet\admin\Web.Config and comment out this line by adding the <!--   --> code around it.

        <!--fix X-Frame-Options header is not set vulnerability-->
        <!-- <add name="X-Frame-Options" value="sameorigin" /> -->
        <!-- HTTP Strict Transport Security, prevents HTTPS click through prompts and redirects HTTP requests to HTTPS -->

Solution for login refresh - http configurations

For login / refresh behavior, configure a Self-Signed Certificate.

In Internet Information Services (IIS), select the parent localhost Home.

Click Server Certificates

You can use the default one already configured or Click Create Self-Signed Certificate.  Steps for the latter follow.

Give it a name, like Prophet.

Select the Default Web Site and click Bindings.

Click Add. 

Change the Type to https:

In the SSL certificate field, select Prophet and click OK.

In IIS, Refresh the website.

Log in

In a browser, navigate to the Admin website using https://YourHostServerName/prophet/admin

You will get the warning “… a problem with this website’s security certificate”

“Click Continue to this website…”


You should be able to login now.


If you have any trouble going through the steps or would like help, please call Avidian Prophet Technical Support at 855-284-3426 x2. 

Or you can email

Or you can create a Support ticket here

Choose files or drag and drop files
Was this article helpful?
  1. Brian Toedtli

  2. Posted
  3. Updated