A user reported an error code 40005 when trying to enable SAML authentication for Solve, and the Azure authentication is successful. They asked how to adjust the mapping. According to the error message, the user was advised to check for certificates and configurations, as outlined in the article on SAML-SSO-for-Solve at https://support.controlup.com/docs/saml-sso-for-solve.
Read the entire article here...
Certificates Related Training & Support Archives
Certificates training and support-related archives from inside the ControlUp Community on Slack.
Why is ControlUp ignoring an impending Netscaler SSL certificate expiration linked to an lbvserver?
A user asked why their expiry alert was not alerting for a NetScaler SSL cert. The solution was that the expiry monitor was not enabled. A recommendation was made to look at ControlUp Trigger Packs, which can be found at https://support.controlup.com/docs/trigger-packs?highlight=trigger.
Read the entire article here...
Read the entire article here...
Download ControlUp ‘Trigger Packs’
One of the most powerful features of ControlUp is 'Triggers.' They allow you to record incidents and automatically perform follow-up actions when a predefined event occurs in your environment or at a scheduled time. Imagine the possibilities. They are truly endless.
Read the entire article here...
Read the entire article here...
How to fix this false positive in ControlUp?
User asked for help with false positive - 400s for Windows Shell, caused by loopback processing mode and RSoP logging not being configured. They used the script from ControlUp's github repository which worked with parameters provided, however executing it from the console gave a false output. @Member determined it was a bug, which the user eventually figured out. Title: Fixing False Positive for Windows Shell - ControlUp Script Library
Read the entire article here...
Read the entire article here...
How can the login process be further optimized, considering the slowdown caused by system AppX Packages?
Suggestions were made to optimize the loginprocess and gain an even lower login time. Steps to audit process creation and termination were provided, along with many other settings related to the login process and the loading of AppX packages. It was mentioned that the worldwide average login duration is 27 seconds, but the user's logon time was 17.5 seconds, so they were doing well. The user may be able to remove the BIO_Enrollment package if not using bio logon methods.
Read the entire article here...
Read the entire article here...
How to Sign ControlUp Scripts
A user asked how to best sign ControlUp scripts - either through buying a code-signing certificate or using KB guidance. It was suggested that scripts be imported into the SBA using the import button, as they can be too big for copy/paste, and a GitHub link was shared for a script which could be used to sign PowerShell scripts using a code-signing certificate.
Read the entire article here...
Read the entire article here...
How does ControlUp Agent Certificate Communication Work?
It was asked if a single certificate needs to be used across Real-Time Consoles, Monitors, and ControlUp Agents, with the Consoles and Monitors holding the private key while the public key is deployed to the Agents. Remediation can be automated for the agents with a GPO, and for the Console/Monitors with a supported PowerShell scripted provided by ControlUp. More information on agent certificate communication can be found at https://support.controlup.com/v1/docs/certificate-based-agent-authentication.
Read the entire article here...
Read the entire article here...
Can ControlUp Insights display ICA proxy connections for my NetScaler Gateway?
The ControlUp console displays ICA proxy connections for NetScaler Gateways, but ControlUp Insights does not. Filtering session activity reports by initial client IP or using export-cuquery may provide the desired results. Details can be found on the ControlUp Support page: https://support.controlup.com/docs/monitor-cluster-powershell-fields-by-table#hdxsessions.
Read the entire article here...
Read the entire article here...
HTTP Scout Fails With Status Code 200 OK
HTTP Scout check failed with a status code of 200 OK and a pattern of "{“status”:“ok”}". The scout had been functioning correctly for several weeks and tests on other custom, public, and servers are working, but the scout does not. When testing in a browser, the user gets the result of "{“status”:“ok”}" which clears when removed and then recreated. A fix is in process and Ehud has offered to provide logs if needed.
Read the entire article here...
Read the entire article here...
Troubleshooting an On-Premises 8.7 Issue with SOP Not Functioning
A customer upgraded their On-Premises environment from 8.5 to 8.7 and introduced SOP 8.7, however it was not functioning. Possible fixes such as restarting ControlUp Monitor and SOP, changing the SSL cert, toggling "Ignore SSL Cert Errors", checking port 443, checking UserManagement logs, checking docker logs, creating a monitor log (Log4Net) and generating the key file again were suggested. They would also benefit from visiting https://support.controlup.com/v1/docs/cop-87-security-enhancement-for-monitor-sop-communication for further instructions.
Read the entire article here...
Read the entire article here...