ControlSuite : How to diagnose when the Equitrac i-Queue Direct Printer Pop up does not appear
Question:
When printing using the workstation client iQueue direct feature, the popup to choose the printer does not appear and the job is not printed. What tests can be done and what logs are required for Kofax support to analyze the issue?
Answer:
Turn on Workstation Client Tracing
For this Kofax Support will need DRC and CAS logs in debug mode. The method to create this is guided by capability of the Web System Manager to turn on debug logging at the Workstation.
Open the Equitrac Web System Manager > Diagnostics > and Enable tracing with the settings Debug and Journaling for the workstation and CAS.
If the Equitrac Web System manager cannot enable logs for the workstation then follow the KB article ControlSuite : How to collect Workstation Client DRC logs manually - Kofax
If the managed Queue popup does not appear this could be one of five problems
- ControlSuite License has not been fulfilled (or communication to the license server is not possible)
- CAS cannot communicate with the workstation
- Communication from Workstation to the CAS is not possible
- Communication with Security Framework is not possible
- Security Framework is not enrolled for this workstation client or its incorrectly enrolled following uninstall/install
Tests
1: Licensing
To test Licensing check that the Licensing server responds. Each workstation must be able to contact the Licensing server on Port 44370
To test this with PowerShell use :
Test-NetConnection - computername _LicenseServerFQDN_ -port 44370
If there is no response then contact your customers network team to check ports have been opened.
2 : Test communication from CAS to the workstation
To test this, RDP to the CAS server
Open a web browser for each service for the following URLs
https://_WorkstationFQDN_:2938
https://_WorkstationFQDN_:4940
replacing the _CASFQDN_ with the fully qualified workstation name
Make sure the page opens. If it cannot be contacted then this could be a proxy setting taking traffic away from the server or Port 2910 could be blocked. If you get a 401 error then the port is contactable.
Test this with PowerShell:
Test-NetConnection - computername _WorkstationFQDN_ -port 2938
Test-NetConnection - computername _WorkstationFQDN_ -port 4940
3: Test Communication from Workstation to the CAS
On the workstation check the following URL:
replacing the _CASFQDN_ with the fully qualified CAS name.
Make sure the page opens. If it cannot be contacted then this could be a proxy setting taking traffic away from the server or Port 2910 could be blocked. If you get a 401 error then the port is contactable.
To test this with PowerShell use:
Test-NetConnection - computername _CASFQDN_ -port 2910
4: Test Communication with the Security Framework
There are two things to try here:
Open a web browser on the workstation and open the following URL, this will show the Security Framework can be reached and datacenters returned.
https://_SFS_HOST_NAME_DOMAIN_QUALIFIED_:8181/SecurityFrameworkService/v1/services/services?servicename=v1-auth
replacing _SFS_HOST_NAME_DOMAIN_QUALIFIED_ with the FQDN of any Security Framework server.
This should return a JSON file (IE will ask to save it) with an Entry for each security Framework server
Alternatively, navigate to a workstation client and in the \Program Files\Kofax\Equitrac\Client (ControlSuite1.2 - Nuance in ControlSuite 1.1) called v1-service.cache-p and the Security Framework servers will be listed if communication has been possible
5: Security Framework is not enrolled for this workstation client or its incorrectly enrolled following uninstall/install
To test the Security Framework enrollments we need to obtain the DRC and Shared Engine certificates and match them up with those enrolled into the security framework.
To get these we need to be on a Security Framework server
Open a browser for each service
https://_WorkstationFQDN_:2938
https://_WorkstationFQDN_:4940
For each URL, jump past the security warning, open the certificate and grab the certificate serial number from the resultant dialog box. If the pages are not visible then there is a communication issue that needs resolving first (see point 2).
To obtain a list of enrollments navigate to the NDISectool folder - \Program Files\Kofax\Shared Services\SecurityFrameworkService\NdiSectool (Controlsuite 1.2 - Nuance in version 1.1) and run the following command in PowerShell
./NdiSecTool.exe -findservices -n SecurityFrameworkservice > Pathtofile\Enrollments.txt
Replace Pathtofile with the full path to where the file needs to be saved.
Once tests have been completed, zip up the files for Shared Engine and DRC and collect results of the tests before logging a case with Kofax Support for analysis
Applies to:
Product | Version |
---|---|
ControlSuite | 1.x |