Common Log Descriptions

The following table provides guidance for troubleshooting common misconfiguration of environments using SOTI Cloud Link Agent

Error/Log Entry Remediation
EndpointNotFoundException: There was no endpoint listening at https://fully.qualified.domain/cla/xxx that could accept the message. The SOTI Cloud Link Agent is not running or the hostname is invalid.
  • Verify that the SOTI Cloud Link Agent service is running
  • Verify that the hostname for the SOTI Cloud Link Agent in the SOTI MobiControl Console is correct
SecurityNegotiationException: Could not establish trust relationship for the SSL/TLS secure channel with authority 'fully.qualified.domain' . Certificate trust could not be established between SOTI MobiControl and the SOTI Cloud Link Agent.
  • Verify you have uploaded the Root certificate that issued the Server Certificate for the SOTI Cloud Link Agent to the SOTI MobiControl Console.
  • Ensure that the common name of the certificate matches that of the host the SOTI MobiControl is communicating
System.Argument.Exception: Access to specified server was not enabled The SOTI Cloud Link Agent is restricting the hosts SOTI MobiControl is communicating with.
  • Add the FQDN of the intended host to the Security section of the SOTI Cloud Link Agent Administration Utility
FaultException: Access is denied. The SOTI Cloud Link Agent has rejected a request because the certificate or windows identity did not match what was expected.
  • Verify the identity used during authentication, and that the SOTI Cloud Link Agent accepts requests from this identity.
SOTI Cloud Link Agent responds to certificate authenticated requests with "403 Forbidden" despite valid client certificate being present in SOTI MobiControl. The issuer of the client certificate does not appear in the Trusted Issuers List presented by the SOTI Cloud Link Agent host.

Refer to http://support.microsoft.com/kb/2464556 for more information.

  • Shorten the Trusted Issuers List by removing unneeded Root certificates
  • Disable sending the Trusted Issuers List entirely