Storage zones controller and the ShareFile administrator interface include several resources to help you monitor storage zones controller activity and troubleshoot issues:
General component status – The Monitoring tab on the storage zones controller console provides component status to help you start the troubleshooting process. Status is provided for items such as access permissions, service status, and Heartbeat Status, which indicates the storage zones controller outbound connectivity to the ShareFile control plane.
Storage zones controller sends updates to the ShareFile web application every 5 minutes. If the ShareFile web application does not receive an update within 10 minutes, it marks the storage zones controller as offline.
For items on the Monitoring tab that appear in red, review the log files for detailed information.
The Monitoring tab does not indicate whether a storage zone is working in terms of connectivity, including whether the ShareFile control plane can reach the external storage zones URL, or whether a client is able to reach the zone.
Storage zones controller server information – For information about the storage use, network use, and file activity of the server: From the ShareFile interface, log on to your ShareFile Enterprise account, go to Admin > StorageZones, click the storage zone, and then click a storage zones controller host name.
- Zone information – For information about the storage use, network use, and file activity for a zone: From the ShareFile interface, log on to your ShareFile Enterprise account, go to Admin > StorageZones, and click a zone name.
- Storage zones controller health status – To determine whether ShareFile.com is receiving heartbeat messages from the storage zones controllers joined to the zone, view the Health status: From the ShareFile interface, log on to your ShareFile Enterprise account, go to Admin > StorageZones, verify that the Health column has a green check mark, and then click the site name to verify that the Heartbeat message indicates that the storage zones controller is responding.
- Log files – Log files provide detailed information about storage zones controller configuration and its components, as described in the next section.
The following log files for storage zones controller are located by default in
|Log file name||Contains logging information for:|
|cfgsrv-%date%.txt||storage zones controller configuration actions, including modifying an existing storage zones configuration, creating a new Storage Zone, and joining a new storage zones controller to an existing primary storage zones controller|
|sc-%date%.txt||ShareFile data upload and download activity for standard and restricted zones|
|CIFS-%date%.txt||storage zone connectors for Network File Shares upload and download activity|
|sharepoint-%date%.txt||storage zone connectors for SharePoint upload and download activity|
|cloudstorageuploader-%date%.txt||Cloud Storage Uploader Service (to a supported third-party storage system)|
|copy-%date%.txt||ShareFile Copy Service|
|delete–%date%.txt||ShareFile Cleanup Service, for the persistent storage cache|
|s3uploader–%date%.txt||ShareFile Management Service. Includes heartbeat status messages|
|zkemail–%date%.txt||Email traffic sent to your SMTP server (for email notifications in restricted zones)|
Extended logging is available for each of the following components. This is useful when you need to provide detailed information to support.
|Component||Location of AppSettingsRelease.config|
|storage zone connectors for Network File Shares||C:\inetpub\wwwroot\Citrix\StorageCenter\cifs|
|storage zone connectors for SharePoint||C:\inetpub\wwwroot\Citrix\StorageCenter\sp|
To enable extended logging
The following steps enable extended logging for all storage zones controller components and services:
- On the storage zones controller server, open IIS.
- Navigate to Default website and then open Application Settings.
- Change the value for enable-extended-logging from 0 to 1.
- Restart the Citrix ShareFile Management Service.
- After you have resolved the issue, we recommend that you clear extended logging to reduce the amount of logging.
To enable extended logging for a particular component, edit its AppSettingsRelease.config file: Change the value of
<add key="enable-extended-logging" value="0" /> from 0 to 1.
You can also check IIS logs to determine if traffic is reaching storage zones controller. IIS logs show all incoming requests. IIS logs for storage zones controller are in c:\inetpub\logs\LogFiles\W3SVC1.
To enable extended IIS logging, see http://support.microsoft.com/kb/313437.
Test upload latency
Storage zones controller includes a webpage that helps you troubleshoot potential latency issues. The page provides the elapsed time and rate for a specified file upload. The time and rate values are provided for the upload to storage zones controller and for the upload to the storage cache. The test does not upload file metadata or change the uploaded file.
This feature is off by default. To enable it, add the key
<add key="EnableTestUploadPage" value="1" /> to C:\inetpub\wwwroot\Citrix\StorageCenter\AppSettingsRelease.config.
To open the page, navigate to
https://externalFQDN/UploadTest.aspx, where externalFQDN is the fully qualified domain name of the storage zones controller. After you specify a file to download, the time and rate data appears. If you need help interpreting the data, contact your support representative.
If you are using Citrix ADC with HTTP callouts enabled for storage zones, traffic to the upload test page will be blocked. Citrix recommends that you perform the latency test from your internal network and bypass the Citrix ADC by using a storage zones controller server address instead of the external zone address.
Troubleshoot installation and configuration
|Issue||Description and resolution|
|“HTTP Error 404 - File or Directory not found” appears during storage zones controller configuration||The message typically results from an issue with IIS or
|“HTTP Error 404.2 – Not Found” appears when browsing localhost on the storage zones controller||The message indicates that ISAPI and CGI restrictions for
|“HTTP Error 413 – Request entity too large” appears after an upload attempt||The message can appear on a network trace after a failed upload attempt to a storage zone and can result from a client certificate setting in IIS. To work around this issue, on the storage zones controller server, open IIS. Navigate to Default website and then open SSL Settings. For Client certificates, select Ignore. Restart the Citrix ShareFile Management Service.|
|IIS errors occur during storage zones controller configuration||IIS errors typically indicate that
|“Failed to Save Storage Center Binding” appears during storage zones controller configuration||The message indicates a permissions problem on the IIS Account Pool user. By default, application pools operate under the Network Service user account. storage zones controller uses the Network Service account by default. If you use a named user account instead of the Network Service account, the named user account must have full access to the network share used for private data storage.|
|“Access denied” appears during zone configuration||The message can occur if the ShareFile account you are logged on as does not have permission to create and manage zones. Use the ShareFile administrator console to set that permission.|
|Outbound requests are blocked||When outbound requests are blocked, the cfgsrv log includes System.Net.WebException: The remote server returned an error: (403) Forbidden. This issue is likely due to the proxy server blocking outbound requests. Verify that your firewall meets the requirements specified in storage zones controller system requirements|
|“Unable to connect to remote server” appears when you log on to storage zones controller||The message typically indicates a proxy issue. Make sure that your proxy settings are configured. If the proxy settings are correct, verify that you can log into your ShareFile account from storage zones controller. Verify that you have administrator-level permissions to configure storage zones controller and that port 443 is open on the external firewall.|
|The folder named ShareFileStorage on your network share does not include SCKeys.txt after you enable and configure storage zones for ShareFile Data||storage zones controller creates SCKeys.txt during installation unless the account you used to install storage zones controller is not in the access control list. Update the access control list and reinstall storage zones controller.|
|File uploads to a shared folder fail after you create a zone||This issue indicates a problem with your internal DNS. You must have both an internal and external DNS record for the storage zones controller FQDN unless the zone is a restricted storage zone.|
|On the Monitoring tab, the Heartbeat Status is red||A red icon indicates that storage zones controller isn’t able to send heartbeat messages to the ShareFile website. Check if the icons for other components are red. If so, refer to the logs for more information. If the s3uploader log shows a failure to send the heartbeat, the storage zones controller server might not be able to contact the ShareFile website unless it goes through a proxy server. To specify a proxy server for storage zones controller, open the controller console and go to the Networking tab. If the storage zones controller server cannot access the ShareFile website using a network service user, either allow the network service user to access the ShareFile website or set up a Windows user account with outbound access to the proxy server.|
|A storage zone does not appear in the ShareFile administrator interface||This issue can indicate a problem with the external address or firewall. First verify in the storage zones controller console that the External Address does not include the port. If it does, remove the port and then restart the controller. If the External Address does not include the port, make sure that your Windows firewall is configured correctly. By default, Windows firewall settings allow outbound traffic for the ShareFile services on port 443. storage zones controller requires that setting. Verify that Windows firewall allows outbound traffic on port 443 for the following processes:
|Storage zones controller does not upload data to ShareFile||In the Citrix ADC console, right-click the load balancing virtual server for statistics, to verify whether traffic is reaching Citrix ADC from the ShareFile control plane, storage zones controller, and ShareFile clients. When you upload a file and the virtual server shows an increase in hits, then the traffic is passing through Citrix ADC. Verify the traffic for every point of the Citrix ADC connection: Content switching virtual server, load balancing virtual servers for connectors and for ShareFile data, HTTP callouts bound to one of the two virtual servers, responder policy bound to the ShareFile data virtual server, connectors virtual server binding to Citrix ADC AAA. Then, test uploads for ShareFile data by unbinding the responder policy in the load balancing virtual server for ShareFile data. (The responder policy drops incoming traffic that is not signed by the ShareFile control plane. From a web browser, type the external FQDN of storage zones controller. If there is connectivity, the ShareFile logo appears. From a web browser, type the URL for a connector. If the following URLs are successful to test accessibility of storage zone connectors, you will be prompted for credentials even if the back-end server is down. Or, if you are logged on as a user, you will get an API response.
|The ShareFile Connectivity from File Cleanup Services status is a red icon after you upgrade storage zones controller||A red icon occurs if Windows starts the File Cleanup Service before storage zones controller establishes a network connection. The status will return to a green icon after the controller server is back on the network.|
|“Path exceeds max length (1024)” appears during connector creation||The message can occur if the external address configured for storage zones controller points to the ShareFile website instead of the storage zones controller server FQDN.|
|“Invalid name” appears when configuring a new storage zones controller after deleting an old one; Restricted Zone Error: HTTP Error 500 (internal server error)||The message can occur if entities related to the old storage zones controller still exist. To resolve this issue: Uninstall the new storage zones controller. Delete the shared network folder. Delete the folder c:\inetpub\wwwroot\Citrix. Open regedit and delete the key HKEY_LOCAL_MACHINE/Software/Wow6432Note/Citrix. Install and configure a new storage zones controller. If the issue persists, contact your support representative. This message occurs when storage zone servers cannot resolve the storage zone FQDN via DNS or the local hosts file. Ensure you have a DNS record or hosts file entry in place so that client workstations and devices can successfully connect to the restricted zone servers.|
To manually register
cd /d C:\Windows\Microsoft.NET\Framework\v4.0.30319 iisreset /stop aspnet_regiis -i iisreset /start %systemroot%\system32\inetsrv\appcmd set config /section:isapiCgiRestriction /[path='%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll'].allowed:True %systemroot%\system32\inetsrv\appcmd set config /section:isapiCgiRestriction /[path='%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll'].allowed:True
Troubleshoot ShareFile clients and web app
If a mobile device won’t connect to a connector, verify connectivity. Many connectivity issues are covered in the preceding table. Make sure that storage zones controller is on-line. Upload a file to the zone. If the upload works, the issue is specific to connectors. Try to connect from the mobile device using both the cellular and company network. Check that the SharePoint server or file server is available.
If a “HTTP Error 401 – Unauthorized” appears when trying to access a connector, it might be any of the following issues that can prevent a user from accessing a connector from ShareFile clients or the ShareFile web app:
- Incorrect configuration of IIS: Verify that the Web Services (IIS) role has Basic Authentication and Windows Authentication enabled. If those options are not listed under Security, use Server Manager to install them and then restart IIS.
- Incorrect user permissions: Verify that the AD user has access to the share. From Server Manager, go to Share and Storage Management, and add the user or change the user permissions as needed.
- A problem with Citrix ADC authentication, authorization, and auditing group access. For troubleshooting information, see <CTX126589.
If a “HTTP Error 403 – Forbidden” appears when connecting to a SharePoint site, then the SharePoint server might be configured for Basic authentication but storage zones controller might not be configured to cache credentials. To resolve this issue, add
<add key="CacheCredentials" value="1"/> to
If a “HTTP Error 503 – Service unavailable” appears when mobile apps try to access a connector, then connectors are sending a response but are unable to handle the HTTP request. This can occur if content switching policies, load balancing VIPs, or the responder policy are incorrectly configured or bound on the Citrix ADC. To resolve this issue, review the Citrix ADC configuration for ShareFile and correct the configuration.