A user asked if Controlup could track certificate expiry on storefront servers, as is done for ADC (trigger). A PowerShell script fired via a scheduled trigger can be used to alert before cert expiry, but Landon's smarter approach via scoutbees in ScoutBees can also be used. More information can be found in ScoutBees.
Read the entire article here...
Certificates Related Training & Support Archives
Certificates training and support-related archives from inside the ControlUp Community on Slack.
Error “You are not authorized to log into ControlUp Contact your ControlUp admin” in Muti-Tennant ControlUp deployment
A user was receiving an error when trying to launch ControlUp Multi-Tenant for the management tenant in the tenant domain. It was suggested that whoever set up that tenant organization did not give the user's account the necessary access to open the console. The user then revealed they used the console with a different organization before and got it working.
Read the entire article here...
Read the entire article here...
Error “Invoke-RestMethod : The request was aborted: Could not create SSL/TLS secure channel” in ControlUp Scoutbees
The user was trying to add scouts using the API but encountered an error message. Dennis suggested adding the TLS setting `$AllProtocols = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12'[System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols` which resolved the issue.
Read the entire article here...
Read the entire article here...
Error Code 40005 When Enabling SAML Authentication for ControlUp Solve
A user reported an error code 40005 when trying to enable SAML authentication for Solve, and the Azure authentication is successful. They asked how to adjust the mapping. According to the error message, the user was advised to check for certificates and configurations, as outlined in the article on SAML-SSO-for-Solve at https://support.controlup.com/docs/saml-sso-for-solve.
Read the entire article here...
Read the entire article here...
Why is ControlUp ignoring an impending Netscaler SSL certificate expiration linked to an lbvserver?
A user asked why their expiry alert was not alerting for a NetScaler SSL cert. The solution was that the expiry monitor was not enabled. A recommendation was made to look at ControlUp Trigger Packs, which can be found at https://support.controlup.com/docs/trigger-packs?highlight=trigger.
Read the entire article here...
Read the entire article here...
Download ControlUp ‘Trigger Packs’
One of the most powerful features of ControlUp is 'Triggers.' They allow you to record incidents and automatically perform follow-up actions when a predefined event occurs in your environment or at a scheduled time. Imagine the possibilities. They are truly endless.
Read the entire article here...
Read the entire article here...
How to fix this false positive in ControlUp?
User asked for help with false positive - 400s for Windows Shell, caused by loopback processing mode and RSoP logging not being configured. They used the script from ControlUp's github repository which worked with parameters provided, however executing it from the console gave a false output. @Member determined it was a bug, which the user eventually figured out. Title: Fixing False Positive for Windows Shell - ControlUp Script Library
Read the entire article here...
Read the entire article here...
How can the login process be further optimized, considering the slowdown caused by system AppX Packages?
Suggestions were made to optimize the loginprocess and gain an even lower login time. Steps to audit process creation and termination were provided, along with many other settings related to the login process and the loading of AppX packages. It was mentioned that the worldwide average login duration is 27 seconds, but the user's logon time was 17.5 seconds, so they were doing well. The user may be able to remove the BIO_Enrollment package if not using bio logon methods.
Read the entire article here...
Read the entire article here...
How to Sign ControlUp Scripts
A user asked how to best sign ControlUp scripts - either through buying a code-signing certificate or using KB guidance. It was suggested that scripts be imported into the SBA using the import button, as they can be too big for copy/paste, and a GitHub link was shared for a script which could be used to sign PowerShell scripts using a code-signing certificate.
Read the entire article here...
Read the entire article here...
How does ControlUp Agent Certificate Communication Work?
It was asked if a single certificate needs to be used across Real-Time Consoles, Monitors, and ControlUp Agents, with the Consoles and Monitors holding the private key while the public key is deployed to the Agents. Remediation can be automated for the agents with a GPO, and for the Console/Monitors with a supported PowerShell scripted provided by ControlUp. More information on agent certificate communication can be found at https://support.controlup.com/v1/docs/certificate-based-agent-authentication.
Read the entire article here...
Read the entire article here...