Affected Chrome Version: 117.x.x.x or higher version

Affected Biostar 2 Software: BioStar 2.9.4 or lower version with the above Chrome Version described

Updated Date: 2024-02-07


Dear Valued Partners,


We would like to address the impact and resolution of the recently reported Chrome update that caused BioStar 2 Login Page issue.


Recently, the web browser policy of Chrome has been updated, and it affects BioStar 2 web page access.


Issue Background:

When upgrading to Google Chrome version 117, due to changes with how Google Chrome handles SSL/TLS certificates, a new error can appear when browsing the BioStar 2 web page.



[Picture 1. Cannot access BioStar 2 Login Page with the error ERR_SSL_KEY_USAGE_INCOMPATIBLE]



[Note] This issue only occurs with the Chrome 117 version or higher version of Chrome.                   [Picture 2. How To Check Chrome Version: About Chrome]




We provide an immediate solution as follows.


Please check if you use BioStar 2 Default Certificate or the private certificate.


[Immediate Solution]

There is an option to resolve the Chrome compatibility issue with ERR_SSL_KEY_USAGE_INCOMPATIBLE.


Regenerate BioStar 2 Default Certificate using the patch tool

- The Patch Tool has been updated to resolve the USB agent issue and improve the patch usage method. 

- Once you run resetCert.bat file under the patch file, the file copies will be automatically updated. 

 [Example Screenshot of resetCert.bat File Running]


How to start


1. Download the manual of the patch file from the following link

BioStar 2_Chrome_Edge_117_Issue_Patch_EN_240207.0.pdf


2. Confirm your BioStar 2 Version and download the file following your BioStar 2 version

BioStar2_Chrome_Edge_117_Issue_Patch_Tool_240207.zip



3. Limitation

BioStar 2.6.0 or lower version is not supported. Please upgrade the BioStar 2 system to the latest version. [BioStar 2] How to Upgrade BioStar 2 Server


[Others]

If you have the same issue with the private certificate, please re-generate your private certificate based on the instructions below.

The article below is for the certificate of device security communication. However, you can also refer to making the self-signed certificate of BioStar 2 HTTPS connection or bundling of your private certificate.

[BioStar 2] How to set up a self-signed certificate for the use of device security communication



BioStar 2 Release Plan:

BioStar 2.9.5 new installation won't have such an issue.

However, upgrade installation needs to consider the above instructions if the issue occurs.



Frequently Asked Questions

Question #1. We use many administrators to use BioStar 2 via Chrome. Should we follow the instructions on a PC that does not have BioStar 2 Server installation?

Answer 1. You do not need to follow the instructions above if your PC is not the BioStar 2 Server PC.


Question #2. We already have our private certificate to use BioStar 2 and have no issues with Chrome up to now. Should we follow the instructions above?

Answer #2.  You do not need to follow the instructions if you do not have the issue. 


Question #3. I have the same issue, and the issue persists even though I applied the patch file.

Answer #3. Please generate a ticket so that we can assist you.




Sincerely,


Suprema Team