Appendix
Troubleshooting
You might encounter some issues while performing the integration steps mentioned in the previous sections. Mentioned below are some of the most common issues and the ways you can resolve them:
Common Issues
| Error | Troubleshooting |
|---|---|
| Authorization failure on Citrix FAS Error: The authorization on xxx\xxx failed. Error calling NCryptOpenStorageProvider214073511 | •Enumerate all the registered providers using command prompt by running the command: certutil -csplist. Ensure that you are able to get SafeNetProtectApp Key Storage Provider as one of the listed providers. If not, try re-installing the provider and running the SafenetProtectAppKSPInstaller.exe with the right credentials. • Ensure that the provider has been registered successfully by checking the registry entries by navigating to Computer > HKEY_LOCAL_MACHINE > SOFTWARE > SafeNet > IcapiSafenetCng and veryfing the version number to be 8.10.0.0. If you find the registry entries missing, re-register the provider using the SafenetProtectAppKSPInstaller.exe with the right credentials. • Ensure that the interface is properly configured on the CipherTrust Manager and there are no communication issues by verifying the log files on the path specified in the ProtectAppICAPI.properties file. If you find any errors in the log file, check your interface settings. For more details refer Interfaces. |
Unable to restart the Citrix Federated Authentication Service from services.mscError: Windows could not start the Citrix Federated Authentication Service on the Local Computer | Ensure that the entry made in the config "Citrix.Authentication.FederatedAuthenticationService.exe.config" has the correct syntax and there aren't any extra trailing spaces while specifying the provider name. |
| Unable to run the SafenetProtectAppKSPInstaller.exe Error: The program can't start because MSVCP100.dll/MSVCR100.dll is missing from your computer. | Download and add the following dlls to C:\Windows\System32:• MSVCP100.dll • MSVCR100.dll |
| General Authorization failure on Citrix FAS | Ensure that Authenticated Users have the Write permission on all the three deployed templates: •Citrix_SmartcardLogon •Citrix_RegistrationAuthority •Citrix_RegistrationAuthority_ManualAuthorization |
