Orbi WiFi 7 RBE973

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

100won
Star

ERR_SSL_KEY_USAGE_INCOMPATIBLE

Google wrote: "

  • Require X.509 key usage extension for RSA certificates chaining to local roots  
     

     



    X.509 certificates used for HTTPS should contain a key usage extension that declares how the key in a certificate may be used. Such instructions ensure certificates are not used in an unintended context, which protects against a class of cross-protocol attacks on HTTPS and other protocols. For this to work, HTTPS clients must check that server certificates match the connection's TLS parameters, specifically that the key usage flag for “digitalSignature” and possibly “keyEncipherment” (depending on TLS ciphers in use) are asserted when using RSA.

    Chrome 117 will begin enforcing that the key usage extension is set properly on RSA certificates chaining to local roots. Key usage is already required for ECDSA certificates, and for publicly trusted certificates. Enterprises can test and temporarily disable key usage enforcement using the RSAKeyUsageForLocalAnchorsEnabled policy (available in Chrome 116). "

We can not access orbilogin.com local site anymore. While waiting for Netgear developers fix this problem, we will do step by step:

1. Copy these below and save as: "name.reg"

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"RSAKeyUsageForLocalAnchorsEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"RSAKeyUsageForLocalAnchorsEnabled"=dword:00000000

 

2. Run "name.reg" file and restart windows.

 

Cheers,

Message 1 of 14

Accepted Solutions
schumaku
Guru

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

SXR80/SXS80: here 

 

SRR30/SXS30: here

View solution in original post

Message 7 of 14

All Replies
Mewohkie
Tutor

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

So navigating to HKEY_LOCAL_MACHINE\SOFTWARE\Policies in regedit on my Windows11 23h2 machine and there is no \Google folder/path no chrome folder/path and under Microsoft, no Edge folder/path.

 

Manually adding them and then adding the registry values to them does not fix this either.

Message 2 of 14
100won
Star

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Hi,
I tested in my laptop before posting here.
I usually use edge and chrome browser.
Message 3 of 14
ReneD
NETGEAR Moderator

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Hello @100won,

 

And welcome to the NETGEAR Community! 🙂

 

This is already an ongoing issue and there is a patch firmware that fixes this. The official firmware is on its way but we do not have ETA on it. Please download the beta firmware on the link provided below and load it to your router and satellite. You can use a firefox browser to login to your GUI and load the firmware provided. After loading the firmware, a full factory default is necessary on the router, then you test if you can use Chrome or Edge after.

 

SXR80

 

https://ntgr.my.salesforce.com/sfc/p/300000000xsV/a/8b0000016X7a/hXgDguHy6KPFdIw0Pk7j20pSnT8m1DbDmxB...

 

SXS80

 

https://ntgr.my.salesforce.com/sfc/p/300000000xsV/a/8b0000016X7f/.SnEz0b73uDzUNo65ym0zhG6TcQvCFQ8AW5...

 

Take note to update the satellite firmware first before the router. You may want to check the link below related to your issue.

 

https://community.netgear.com/t5/Orbi-Pro-WiFi-for-Small-Business/Chrome-Certificate/m-p/2367330#M68...

 

Have a lovely day,

 

Rene D 
Netgear Team
 

Message 4 of 14
MELGEAR
Aspirant

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Trying to enter the menu of the Orbi-Pro-router using Edge or Chrome can lead to the message:

 

It looks like the webpage at https://.... ight be having issues, or it may have moved permanently to a new web address.

ERR_SSL_KEY_USAGE_INCOMPATIBLE
 
If it is only about being able to enter the Orbi-menu of the Orbi-router, please use an alternative browser as a quick fix, for example: Firefox.  That worked for me very well to ignore the error message and to enter the Orbi menu/interface.
Message 5 of 14
Rillekille
Guide

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Hi @ReneD !

If there is a patch firmware for this issue I'm also in need for it.
Can you please refer me too?

Best regards

/Rickard Hökros

Model: RBR50|Orbi AC3000 Tri-band WiFi Router
Message 6 of 14
schumaku
Guru

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

SXR80/SXS80: here 

 

SRR30/SXS30: here

Message 7 of 14
MartijnS
Guide

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Is there also a patch for the SRS60?

Message 8 of 14
Chris_888
Initiate

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

I second that, even if it's a end-of-life product, not being able to access the login page to configure the router settings make my router obsolete and un-usable. Orbi app lack to many advance setting that i require.

 

@ReneD Please bring patch to SRR60 router and SRS60 satellite users. 🙂

 

Thanks

Message 9 of 14
schumaku
Guru

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

@DavidGo can you jump in here again please? If wally brain is right, you mentioned there is a build with a possible fox for the SRR60/SRS60/SRK60.

Message 10 of 14
DavidGo
NETGEAR Expert

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Message 11 of 14
Rillekille
Guide

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

@ReneD Any patch for the RBK50?

Regards

/Rickard

Message 12 of 14
Chris_888
Initiate

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Hi @schumaku and @DavidGo 

 

I updated SRR60 and SRS60 ( with firefox, I didn't know it worked using that browser ) and I can now access my router login with Chrome/Edge again!

 

Many thanks

Message 13 of 14
schumaku
Guru

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Message 14 of 14
Discussion stats
  • 13 replies
  • 15895 views
  • 9 kudos
  • 9 in conversation
Announcements