Debugging ExactAccess Credential Passthrough Issues
The following are typical issues to look at when Hyperspace is not logged in:
Any version of Hyperspace
Is a Citrix server that has the plugin installed being hit?
On an endpoint device, open the Citrix connection manger to see what Citrix server you're connected to?
If not correct, look at the pubLauncherSF.exe settings.
Was Citrix installed or reinstalled after installing the plugin?
If yes, then use the instructions in the known issues section on how to reapply the virtual channel settings.
Hyperspace 2017
Is a login device configuration being used?
If yes, is the login device being loaded?
Turn on Epic logging and look for a line that looks like the following in the log file:
EDAuthentication.BridgeAuthenticate: Looking at 10002: HCILoginDevice.ProxCard2
If this type of line is not present, Hyperspace is not loading our login device.
Check that the workstation that you are connecting from is configured to use the Primary Authentication Device.
If hciepicsessionmgr.exe is not being started when the Hyperspace process is started?
Test on the Citrix server using task manager to see if hciepicsessionmgr.exe is started. It should start and close. If it doesn’t, then TFA_AIE=1 setting was not applied at install.
Note
This is not supported in 2018.
Hyperspace 2018
When Hyperspace is started, is a log file created in the following location and format?
C:\Temp\Logs\${CLIENTNAME}_${USER NAME}_log.txt
If no log file has been created, this indicates that Hyperspace has not been configured correctly to load the plugin.
To debug, you will need to enable Hyperspace logging. This will require help from your Epic TS to enable logging and decrypt the log file.
After generating a log file and decrypting it, search the log file for the following to see if Hyperspace is loading the plugin:
If text
EDAuthentication.Initialize -- Device List
andHCILoginDeviceNET.ProxCard
are on the same line, this shows that the plugin was an available device.If text
EDAuthentication.BridgeAuthenticate -- Looking at
andHCILoginDeviceNET.ProxCard
is on the same line, this shows that the plugin was called.
If you don't see any of the above text in the log file, the Prog ID has not been configured correctly in the authentication device's E0G record.
If you only see the first set of text, the workstation login context has not been configured correctly in Hyperspace Authentication Administration.