# BrowZer **URL:** https://openziti.discourse.group/c/browzer/28.md [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) --- ## [About the BrowZer category](https://openziti.discourse.group/t/about-the-browzer-category/1665)
**Author:** [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Replies:** 0\ **Last updated:** [September 25, 2023, 4:26pm UTC](https://openziti.discourse.group/t/about-the-browzer-category/1665 "2023-09-25T16:26:34Z")
BrowZer is a suite of technologies allowing a web browser (s, not Z) to bootstrap a zero trust connection over an OpenZiti overlay. It is made up of numerous GitHub projects and numerous pieces. This category covers all … --- ## [Browzer - openziti](https://openziti.discourse.group/t/browzer-openziti/5996)
**Author:** [@Sachini](https://openziti.discourse.group/u/Sachini)\ **Replies:** 1\ **Last updated:** [August 11, 2026, 11:26am UTC](https://openziti.discourse.group/t/browzer-openziti/5996 "2026-08-11T11:26:54Z")
Hello Team, Getting this error after SSO login(keycloak) on the browser console. Any idea how to resolve it? Uncaught (in promise) Error: The request could not be completed. The session is not authorized or the credent… --- ## [BrowZer 0.90.0 with External Authentik OIDC - invalid\_grant Error During Token Exchange](https://openziti.discourse.group/t/browzer-0-90-0-with-external-authentik-oidc-invalid-grant-error-during-token-exchange/5856)
**Author:** [@vox100](https://openziti.discourse.group/u/vox100)\ **Replies:** 2\ **Last updated:** [July 9, 2026, 1:42am UTC](https://openziti.discourse.group/t/browzer-0-90-0-with-external-authentik-oidc-invalid-grant-error-during-token-exchange/5856 "2026-07-09T01:42:55Z")
We successfully use Authentik as OIDC provider Bootstrapper correctly reads and embeds config But fails with: invalid\_grant - does not match redirection URI or was issued to another client Error occurs in oidcUtil.get… --- ## [BrowZer's Doc missing?](https://openziti.discourse.group/t/browzers-doc-missing/5849)
**Author:** [@KongNan](https://openziti.discourse.group/u/KongNan)\ **Replies:** 4\ **Last updated:** [May 27, 2026, 1:55am UTC](https://openziti.discourse.group/t/browzers-doc-missing/5849 "2026-05-27T01:55:58Z")
Page Not Found: https://netfoundry.io/docs/openziti/learn/quickstarts/browzer/ --- ## [BrowZer iOS+Other Browsers+Cert Promps](https://openziti.discourse.group/t/browzer-ios-other-browsers-cert-promps/4479)
**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\ **Replies:** 2\ **Last updated:** [December 14, 2025, 1:56pm UTC](https://openziti.discourse.group/t/browzer-ios-other-browsers-cert-promps/4479 "2025-12-14T13:56:00Z")
Hi, I quickly wanted to give a huge thanks to the BrowZer team. It’s really impressive to just build the Ziti tunneled SDK into the browser. This opens whole new worlds when working with external users. For the followi… --- ## [Hot reload of certificates](https://openziti.discourse.group/t/hot-reload-of-certificates/5192)
**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\ **Replies:** 4\ **Last updated:** [October 6, 2025, 1:28pm UTC](https://openziti.discourse.group/t/hot-reload-of-certificates/5192 "2025-10-06T13:28:00Z")
Hi, is it currently necessary to restart the controller if the public alternative certificate is renewed? We didn’t find a way yet to renew our Let’s Encrypt certs except for restarting the Ziti Controller? Is there a w… --- ## [BrowZer Multi-Service Support, NGINX Module Logging, and Multi-Tenant Design in OpenZiti](https://openziti.discourse.group/t/browzer-multi-service-support-nginx-module-logging-and-multi-tenant-design-in-openziti/5118)
**Author:** [@sherry-sun-webcomm](https://openziti.discourse.group/u/sherry-sun-webcomm)\ **Replies:** 3\ **Last updated:** [September 16, 2025, 3:45pm UTC](https://openziti.discourse.group/t/browzer-multi-service-support-nginx-module-logging-and-multi-tenant-design-in-openziti/5118 "2025-09-16T15:45:36Z")
Hi: We are building a SaaS platform based on OpenZiti BrowZer to provide agentless secure access to internal web applications. Our requirements include: Hiding real network topology and service locations (network st… --- ## [Could anyone explain the use case for BrowZer](https://openziti.discourse.group/t/could-anyone-explain-the-use-case-for-browzer/5054)
**Author:** [@sains.zta](https://openziti.discourse.group/u/sains.zta)\ **Replies:** 2\ **Last updated:** [September 3, 2025, 1:02am UTC](https://openziti.discourse.group/t/could-anyone-explain-the-use-case-for-browzer/5054 "2025-09-03T01:02:00Z")
Hi, I’m new here and currently exploring BrowZer. From what I understand, it functions as an agentless OpenZiti client—is that correct? I’d also like to know whether BrowZer offers the same features as the traditional cl… --- ## [controller-oidc-proxy：net::ERR\_CONNECTION\_REFUSED](https://openziti.discourse.group/t/controller-oidc-proxy-net-err-connection-refused/4991)
**Author:** [@McGonagall666](https://openziti.discourse.group/u/McGonagall666)\ **Replies:** 7\ **Last updated:** [September 1, 2025, 7:30am UTC](https://openziti.discourse.group/t/controller-oidc-proxy-net-err-connection-refused/4991 "2025-09-01T07:30:51Z")
controller version: 1.5.4 browZer version: latest controller-oidc-proxy urlWithParams："https://ctrl.mmtest.com:1280/oidc/authorize?client\_id=openziti&scope=openid%20offline\_access&response\_type=code&redirect\_uri=https%… --- ## [Browzer fails fo prefetch React](https://openziti.discourse.group/t/browzer-fails-fo-prefetch-react/4535)
**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\ **Replies:** 1\ **Last updated:** [May 15, 2025, 12:57pm UTC](https://openziti.discourse.group/t/browzer-fails-fo-prefetch-react/4535 "2025-05-15T12:57:09Z")
Hi there, I think this might be a topic for @curt? :slight\_smile: I’m seeing an odd runtime error whenever I open our OpenZiti Browzer-protected NextJS app. Console trace: VM164:1 Failed to fetch RSC payload for http… --- ## [Deleting referenced auth policy gives unhandled 500 error & Browzer help](https://openziti.discourse.group/t/deleting-referenced-auth-policy-gives-unhandled-500-error-browzer-help/4469)
**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\ **Replies:** 18\ **Last updated:** [May 3, 2025, 9:22pm UTC](https://openziti.discourse.group/t/deleting-referenced-auth-policy-gives-unhandled-500-error-browzer-help/4469 "2025-05-03T21:22:10Z")
Hi there, I've set up a new instance of OpenZiti to test some of the newer features next to our working prod environment. I'm very impressed by the HA work - cool stuff! :slight\_smile: After understanding the PKI gene… --- ## [Browzer for MS Exchange OWA](https://openziti.discourse.group/t/browzer-for-ms-exchange-owa/2595)
**Author:** [@ghibsch](https://openziti.discourse.group/u/ghibsch)\ **Replies:** 14\ **Last updated:** [April 8, 2025, 3:43am UTC](https://openziti.discourse.group/t/browzer-for-ms-exchange-owa/2595 "2025-04-08T03:43:47Z")
I'm very interested in combining BrowZer with our on-prem Exchange server. IMO Exchange has a questionable history of security issues and using BrowZer to decouple it from the internet is a compelling idea. I've got my… --- ## [BrowZer network zone / install location](https://openziti.discourse.group/t/browzer-network-zone-install-location/4278)
**Author:** [@007bond007](https://openziti.discourse.group/u/007bond007)\ **Replies:** 8\ **Last updated:** [March 31, 2025, 4:08pm UTC](https://openziti.discourse.group/t/browzer-network-zone-install-location/4278 "2025-03-31T16:08:44Z")
Hi team, I'm looking at setting up BrowZer and I'm seeing it setup on the same server as the Ziti Controller - and I'm curious about best practices here. Currently I use HAProxy to handle all inbound connections on a si… --- ## [Keeping IDP Dark](https://openziti.discourse.group/t/keeping-idp-dark/4281)
**Author:** [@Curt\_Ziti](https://openziti.discourse.group/u/Curt_Ziti)\ **Replies:** 1\ **Last updated:** [March 31, 2025, 11:36am UTC](https://openziti.discourse.group/t/keeping-idp-dark/4281 "2025-03-31T11:36:54Z")
Hey All, Wondering if i could get some architectural on if it's possible to keep my IDP provider dark while using BrowZer? Currently for SSO onto the Ziti network, i've got a tunnel on the controller which is tunneling… --- ## [BrowZer Related Questions](https://openziti.discourse.group/t/browzer-related-questions/4242)
**Author:** [@aidanhopper](https://openziti.discourse.group/u/aidanhopper)\ **Replies:** 8\ **Last updated:** [March 26, 2025, 8:50pm UTC](https://openziti.discourse.group/t/browzer-related-questions/4242 "2025-03-26T20:50:20Z")
I actually just found out about the capabilities of BrowZer and set up an instance, very impressive. I have a couple of questions. Is there a way to disable the button that shows up on a website served with BrowZer? I'… --- ## [Brozwer support for API, getting error on option and post methods](https://openziti.discourse.group/t/brozwer-support-for-api-getting-error-on-option-and-post-methods/3741)
**Author:** [@ss\_vinoth22](https://openziti.discourse.group/u/ss_vinoth22)\ **Replies:** 32\ **Last updated:** [January 27, 2025, 2:51pm UTC](https://openziti.discourse.group/t/brozwer-support-for-api-getting-error-on-option-and-post-methods/3741 "2025-01-27T14:51:33Z")
Hi Im trying out browzer for my webapp, I was able to reach my frontend through browzer but backend fails not sure how to resolve this? Get 403 on /graphql post method. With ziti edge desktop which works perfectly, thi… --- ## [Browzer Setup - Error 1014 - OriginTrial subdomain mismatch](https://openziti.discourse.group/t/browzer-setup-error-1014-origintrial-subdomain-mismatch/2481)
**Author:** [@ghibsch](https://openziti.discourse.group/u/ghibsch)\ **Replies:** 25\ **Last updated:** [November 4, 2024, 2:49pm UTC](https://openziti.discourse.group/t/browzer-setup-error-1014-origintrial-subdomain-mismatch/2481 "2024-11-04T14:49:23Z")
I've got an OpenZiti VPS running with a controller and edge-router installed and working. I have another edge router in a private network which is connected and also working. I added ZAC in a docker and that's working.… --- ## [BrowZer with Zitadel: "Check that this 'externalId' exists and has case-sensitive match"](https://openziti.discourse.group/t/browzer-with-zitadel-check-that-this-externalid-exists-and-has-case-sensitive-match/3278)
**Author:** [@etec-masterofsynapse](https://openziti.discourse.group/u/etec-masterofsynapse)\ **Replies:** 28\ **Last updated:** [October 22, 2024, 1:17pm UTC](https://openziti.discourse.group/t/browzer-with-zitadel-check-that-this-externalid-exists-and-has-case-sensitive-match/3278 "2024-10-22T13:17:36Z")
Hi all, with much difficulties, I was able to install the quickstart OpenZiti setup and also the BrowZer bootstrapper. I am using Zitadel as my IdP, but spun up a Keycloak instance also to double-check if the errors I … --- ## [I have a configuration issue with Browzer Intercept and would like to ask for advice](https://openziti.discourse.group/t/i-have-a-configuration-issue-with-browzer-intercept-and-would-like-to-ask-for-advice/3073)
**Author:** [@songt](https://openziti.discourse.group/u/songt)\ **Replies:** 1\ **Last updated:** [August 31, 2024, 1:29pm UTC](https://openziti.discourse.group/t/i-have-a-configuration-issue-with-browzer-intercept-and-would-like-to-ask-for-advice/3073 "2024-08-31T13:29:46Z")
I have a question about the Browzer tutorial on the official website. In the tutorial wildcard\_url=browzer.example.demo.openziti.org intercept\_address="brozac.ziti" After completing the experiment, accessing browzac. … --- ## [Missing ziti-cli-functions?](https://openziti.discourse.group/t/missing-ziti-cli-functions/3031)
**Author:** [@apinohixcorp](https://openziti.discourse.group/u/apinohixcorp)\ **Replies:** 5\ **Last updated:** [August 25, 2024, 11:46pm UTC](https://openziti.discourse.group/t/missing-ziti-cli-functions/3031 "2024-08-25T23:46:00Z")
I'm trying to follow this instruction to install BrowZer using the Clone from Github: BrowZer | OpenZiti Enabling the systemd service specifies a ziti-cli-functions.sh helper script, but I'm not seeing this script anyw… --- ## [Unable to serve ZAC over BrowZer](https://openziti.discourse.group/t/unable-to-serve-zac-over-browzer/2943)
**Author:** [@pgross](https://openziti.discourse.group/u/pgross)\ **Replies:** 20\ **Last updated:** [August 12, 2024, 2:15pm UTC](https://openziti.discourse.group/t/unable-to-serve-zac-over-browzer/2943 "2024-08-12T14:15:59Z")
I'm sorry if I'm exaggerating the questions here, but I'm currently trying out a few things. I'm trying to serve the console with browZer. I've set it up using letsencrypt certificates and the docker image from Package… --- ## [Right place for the \`alt\_server\_cert\` in router config](https://openziti.discourse.group/t/right-place-for-the-alt-server-cert-in-router-config/2815)
**Author:** [@marvkis](https://openziti.discourse.group/u/marvkis)\ **Replies:** 4\ **Last updated:** [July 5, 2024, 2:11pm UTC](https://openziti.discourse.group/t/right-place-for-the-alt-server-cert-in-router-config/2815 "2024-07-05T14:11:11Z")
Hi, I'm struggling a bit: what is the right place to put the alt certs in? When a template config is created with ziti create config router edge --routerName test, I see three possible options: identity: \[...\] #alt\_… --- ## [Browzer with authentik](https://openziti.discourse.group/t/browzer-with-authentik/2769)
**Author:** [@marvkis](https://openziti.discourse.group/u/marvkis)\ **Replies:** 7\ **Last updated:** [July 2, 2024, 9:59pm UTC](https://openziti.discourse.group/t/browzer-with-authentik/2769 "2024-07-02T21:59:56Z")
Hi there, I am currently trying to get browzer to work in our infrastructure. We are using Authentik as IDP. I installed the browzer-bootstrapper and started some initial testing. It seems I have initial things up - bro… --- ## [Browzer with keycloack and self-signed certs](https://openziti.discourse.group/t/browzer-with-keycloack-and-self-signed-certs/2686)
**Author:** [@CarlosHleb](https://openziti.discourse.group/u/CarlosHleb)\ **Replies:** 14\ **Last updated:** [June 14, 2024, 12:51pm UTC](https://openziti.discourse.group/t/browzer-with-keycloack-and-self-signed-certs/2686 "2024-06-14T12:51:08Z")
Hello, Watching this video: https://www.youtube.com/watch?v=ti1w7dQ3gSY&ab\_channel=OpenZiti Would it work to combine the the docker compose simplified quickstart with browzer and keycloack using self-signed certs only? … --- ## [409 error aboat brower enable](https://openziti.discourse.group/t/409-error-aboat-brower-enable/2669)
**Author:** [@rootwang](https://openziti.discourse.group/u/rootwang)\ **Replies:** 3\ **Last updated:** [June 12, 2024, 5:45am UTC](https://openziti.discourse.group/t/409-error-aboat-brower-enable/2669 "2024-06-12T05:45:33Z")
When i access https://brozac.${wildcard\_url}:8446 after i have started BrowZer, I got The url of response is https://brozac.rootwang.link:8446/browzer\_error?browzer\_error\_data==%7B%22status%22:409,%22code%22:1014,%22… --- ## [Encount a problem when Install BrowZer with docker](https://openziti.discourse.group/t/encount-a-problem-when-install-browzer-with-docker/2623)
**Author:** [@rootwang](https://openziti.discourse.group/u/rootwang)\ **Replies:** 14\ **Last updated:** [June 5, 2024, 1:12pm UTC](https://openziti.discourse.group/t/encount-a-problem-when-install-browzer-with-docker/2623 "2024-06-05T13:12:38Z")
Hello, I tried to install BrowZer with Docker, but encountered an error. Here is the error log: ubuntu@ip-10-1-2-216:~$ sudo docker run \\ --name ziti-browzer-bootstrapper \\ --rm -v /etc/letsencrypt:/etc/letsencrypt … --- ## [BrowZer & Home Assistant - Strange responses after login to the Overlay Network](https://openziti.discourse.group/t/browzer-home-assistant-strange-responses-after-login-to-the-overlay-network/2126)
**Author:** [@MrRatherford](https://openziti.discourse.group/u/MrRatherford)\ **Replies:** 14\ **Last updated:** [March 8, 2024, 3:39pm UTC](https://openziti.discourse.group/t/browzer-home-assistant-strange-responses-after-login-to-the-overlay-network/2126 "2024-03-08T15:39:25Z")
I am using an CloudZiti Setup with BrowZer (with Auth0 as external JWT signer) enabled. Via the Ziti Overlay Network I want to access my Home Assistant Instance (on Raspberry Pi 4) with the Open Ziti Addon (v1.5.3) insta… --- ## [Configure the External JWT Signer and Auth Policy error](https://openziti.discourse.group/t/configure-the-external-jwt-signer-and-auth-policy-error/1812)
**Author:** [@McGonagall666](https://openziti.discourse.group/u/McGonagall666)\ **Replies:** 8\ **Last updated:** [February 29, 2024, 5:07am UTC](https://openziti.discourse.group/t/configure-the-external-jwt-signer-and-auth-policy-error/1812 "2024-02-29T05:07:20Z")
Configure external JWT signers and authentication policies for the first time, add services to access HTTP web applications, associate/update identities with authorization policies, all passed, and finally prompt 'now go… --- ## [Getting issues while trying to install Enabling BrowZer](https://openziti.discourse.group/t/getting-issues-while-trying-to-install-enabling-browzer/2077)
**Author:** [@Suvankar](https://openziti.discourse.group/u/Suvankar)\ **Replies:** 6\ **Last updated:** [February 13, 2024, 1:00pm UTC](https://openziti.discourse.group/t/getting-issues-while-trying-to-install-enabling-browzer/2077 "2024-02-13T13:00:23Z")
I was going through BrowZer installation guide based on the documentation -\> Example Enabling BrowZer | OpenZiti. Once the auth0 is redirected to actual brozer domian i am getting error as ZBSW-warn \_shouldRouteOverZi… --- ## [BrowZer+WHM/cPanel](https://openziti.discourse.group/t/browzer-whm-cpanel/2046)
**Author:** [@shumbashi](https://openziti.discourse.group/u/shumbashi)\ **Replies:** 1\ **Last updated:** [February 5, 2024, 5:03pm UTC](https://openziti.discourse.group/t/browzer-whm-cpanel/2046 "2024-02-05T17:03:25Z")
Hello All; I'm just getting started with OpenZiti, I've managed to get the quick start going with BrowZer and Keycloak integration with federated login through WHMCS. My next step is to protect a brownfield application… [Next page](https://openziti.discourse.group/c/browzer/28.md?page=1)