Troubleshooting Buypass «Javafri»

Troubleshooting Buypass «Javafri»

 

  The tips on this page are written in English only. 

 

 

Troubleshooting Buypass «Javafri»

Depending on the environment it is possible to end up with a non-functioning Javafri installation. This document describes a number of steps that can be taken to troubleshoot and repair errors.

Buyass Javafri will automatically install in one of two “modes” depending on the host OS:

  1. On Windows Server platforms, Javafri configures itself to support a Terminal Server environment with remote users. Two components will be installed

    1. A Windows Service, Smart Card Gatekeeper, which should auto-start under Local System account.

    2. The smart card proxy, Buypass.SCProxy.exe, of which one instance should auto-start for each logged-in user and run under the user’s account.

  2. On Windows desktop and OSX platforms, only the smart card proxy is installed. Only one instance of this process should run on the system.

 

Most of the troubleshooting steps described below apply to both types of installations; steps that apply only to Terminal Server environments are market with [Server].

NOTE: Some of the troubleshooting procedures require Administrator privileges. If your account does not have Administrator rights, you may therefore need assistance from a person who has access to an account with Local Administrator privileges.

 

 

Installation overview

Buypass Javafri installs in “%ProgramFiles(x86)\Buypass\Javafri løsning”. On a server platform, a typical installation has the following contents:

On a desktop platform, the installation directory should look like this:

Auto-start of the SCProxy on user logon is configured in the Registry key

HKLM\Software\WOW6432Node*\Microsoft\Windows\CurrentVersion\Run:

*) WOW6432Node => on 64 bit systems

 

 

Basic Troubleshooting steps

This section describes a few simple steps to verify that Buypass Javafri has been correctly installed.

Software version

Buypass has released several versions of Javafri, so any problem you experience with your installation may have been fixed in a more recent version. As a first step, you should therefore check if you have the latest version and upgrade if necessary.

To find the version number of your installed Buypass Javafri:

  • Open File Manager

  • Navigate to %ProgramFiles(x86)%\Buypass\Javafri løsning

  • Right-click on the file Buypass.SCProxy.exe and select Properties

 

Select the Details tab and check the Product Version field:

You can download the latest version from Buypass Download Center.

 

SCProxy does not autostart

There should be one SCProxy process, running under the currently logged-in user, visible in Task Manager:

[Server] On server platforms, there should be one SCProxy process for each logged-in user as well as the Smart Card Gatekeeper service:

If the Buypass.SCProxy.exe process does not start:

  • Check the Registry key described in Basic installation

  • Check with your Systems Administrator if there are policy restrictions in effect to prohibit auto-start of programs for ordinary users. This particularly applies to Server installations and is a problem often encountered on Citrix Terminal Servers. 
    If your environment has another preferred mechanism for auto-start of programs at logon, that mechanism may be used instead of the Run Registry key.

  • We have seen issues regarding Javafri and Citrix App Layering. If the Buypass.SCProxy.exe service fails to start when using Citrix App Layering, try installing Javafri through the msi file on server startup instead.

  • If Buypass.SCProxy.exe service fails to start on a Citrix published app but works fine in an Citrix published desktop, it will be necessary to load the SCProxy exe file at user logon. An example of this solution is to use create a GPO for the Citrix application server with the following setting:

 

 [Server] If the Buypass.SCProxy.Service process is absent from the process list:

  • Check that Smart Card Gatekeeper service is installed and configured to Automatic start:



  • Check the Event log (eventvwr.exe) for error messages pertaining to this service.

 

Browser does not detect the Smart Card Proxy

If the SCProxy is running and you are still, when attempting identification or signing, either

  • prompted to install “Buypass Javafri”,
    or

  • presented with the old Java-based solution,

 

then you can perform the following steps to verify the installation:

  • If your browser is IE 10 or IE 11, check that it is not set up to run in “Compatibility mode” for the web sites you access to authenticate or sign. By default, IE 10/11 runs intranet pages in Compatibility Mode; other sites may be configured explicitly under Tools/Compatibility View.

  • Check that the TLS certificate for the SCProxy is properly installed.

  • During installation, a self-signed TLS certificate is generated and set as a Trusted Root in Windows Certificate Store. This certificate and its corresponding private key is used to set up an https connection between a web page and the local SCProxy process.

 

For Internet Explorer, Edge, Chrome and Opera, the following procedure applies:



Mozilla Firefox has its own certificate store. Correct installation of the TLS certificate in Firefox can be verified as follows: