WHD 12.8.4 Is out, start your testing!

Are you getting any CSRF errors with 12.8.4?  I'm hoping they resolved this issue in this version.

Yes mine Lab seems to be clean with those now but plenty of "ERROR w.helpdesk.com.macsdesign.whd.daemon - Error while triggering session in com.macsdesign.whd.daemon.ServletPulseDaemon: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" still !!

Just got the same error even when I'm not connected to VPN.

Are you behind a load balancer/proxy that might dynamically allocate IP addresses?

Yea our site points back to a reverse proxy.

Sorry I used load balancer and reverse proxy interchangeably.  Try going directly to the WHD server and see if you still encounter the session issue. 

As you came form 12.8.3+HF2 you may have missed this in HF3 which would apply to 12.8.4 as well.

Resolved issue with JVM argument to allow users to opt out of IP binding enforcement.
Note: This fix is available in HF3 with the default configuration
(no entry in the wrapper_template file).
JVM argument to allow users to opt out of IP binding enforcement If you use an AWS load balancer or a sticky session and face an issue with session logout/termination and an error message 

Terminating the Session due to IP mismatch or Session is not valid, follow the instructions below and add the required configuration file.
For Windows:
1. Navigate to the <WebHelpDesk>/bin/wrapper/conf directory.
2. Open the wrapper_template.conf file in a text editor and search for
# Java Additional Parameters.
3. Add the below configuration at the end of the list and update the
configuration no if required.
wrapper.java.additional.20=-DskipIpBindingWithSession=true
4. Save and close the wrapper_template.conf file.

Thanks Pabely!  Do you if I need to reboot the helpdesk server after applying these changes?

Definitely yes. Any changes to the wrapper files require a reboot.

That worked!  Much appreciated!

Thanks James!  Pabely solution worked.

I am pleased this worked for you, easy to miss as it is only in the 12.8.3+HF3 release notes and has not made it into the 12.8.4 Admin Guide yet as per other wrapper switches - I have already brought this to the attention of SW.

I am pleased this worked for you, easy to miss as it is only in the 12.8.3+HF3 release notes and has not made it into the 12.8.4 Admin Guide yet as per other wrapper switches - I have already brought this to the attention of SW.