Skip to Content

Duo health check failed: invalid_client: Invalid Client assertion: Token has expired

How to resolve error: Duo health check failed: invalid_client: Invalid Client assertion: Token has expired?


Overview: This article explains how to resolve the error "Duo health check failed: invalid_client: Invalid Client assertion: Token has expired" by correcting and synchronizing the time on the gateway server.


The above error is almost always caused by time mismatch on the gateway server. Run below command to check the server time

root@gateway:~# date

If the time time is not synced correct the server time


Related articles: 

How to resolve error: Duo health check failed: invalid_client: Integration type does not support frameless access?

How to enable/disable DUO 2fa in Ezeelogin?

How to Reset Duo Authenticator on a New Phone?