RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
Version(s): 8.x

• When there is more than one web tier in a deployment and trying to access the Self-Service Console using the hostname of the virtual hostname and Load Balancer, it returns a message of "session expired."
• The session expired message appears after entering the user ID on the login page rather than completing the login procedure
• The issue continues to happen after restarting services on the web tier and for Authentication Manager.

• The load balancer is configured as recommended by our guides to use round robin access; however the load balancer is misconfigured to use round robin access per request.
• Because of this a time out occurs and the session shows as expired

• Configure the load balancer with round robin access. but per session access, meaning each user session is handled by ONLY one web tier server.
• Configure the load balancer with "sticky sessions" so that it works correctly.
• Confirm that Make sure network connections are properly configured. 
  
  

As a work around, keep only one web tier server running until the system is configured as documented above.