ShareFile

Troubleshooting Checklist for storage zones controller configuration for ShareFile

This article summarizes configuration checklist for storage zones controller on premise if it is being configured.

Check The Following

External Address

  • Fully Qualified Domain Name with a certificate which resolves to a public IP from the internet and possibly a private IP internally.
  • If the storage zones controller(s) are deployed without a load balancer (or ADC) in front then the FQDN should resolve to the IP address of the storage zones controller.
  • If a Netscaler is present, the FQDN should resolve to the IP address of the VIP.
  • Ensure FQDN is resolvable from external and internal networks.
  • Verify via nslookup of the FQDN resolves to a public IP address (it can also resolve to the Natted private IP for the devices within the customers network).

Certificate

  • Public Certificate from a trusted Certificate Authority.
  • Self-Signed certificates cannot be used and if used will result in upload/download failures.
  • In the absence of a load balancer, the public certificate should be bound to IIS bindings on the SZC(s). The below screenshot shows the steps required to verify the correct certificate bindings on IIS.
  • If Netscaler is present make sure the certificate is bound on the VIP. The below example shows the wildcard certificate bound to the content switching virtual server created using the ShareFile wizard on the Netscaler.
  • Verify the validity of the certificate and port 443 is open on the FQDN using any tool of choice (e.g. https://www.sslshopper.com/ssl-checker.html). Using SSL Checker – Green = Good & Red = Bad.

Permissions

  • CIFS Share – Ensure “Full Control” is granted to the ShareFile service account configured to access the Share, which utilized by the storage zones controller(s). The service account is used by the storage zones controller(s) to upload and download data to the Share. If there are permission issues, then uploads/downloads will fail.
  • To verify the service account used on the Primary storage zones controller launch the “Configuration Page”.
  • Login -> ShareFile Data – Local Network Share Configuration -> Network Share Username.

Extended Troubleshooting

  • On the Monitoring section of the storage zones controller configuration page ensure that everything is green. The console provides component status to help you start the troubleshooting process. Status is provided for items such as access permissions, service status, and Heartbeat Status, which indicates the storage zones controller outbound (not inbound) connectivity to the ShareFile control plane.
Troubleshooting Checklist for storage zones controller configuration for ShareFile