FAQ

Common issues and their solutions

Onboarding with QR code fails with “Operation Failed - Service domain could not be verified.”
To onboard users with QR code you should configure authentication domain with "ntk cfg setc :auth_domain https://2fa.example.com" where 2fa.exampl...
Mon, 11 May, 2020 at 1:20 PM
How to update from versions prior to 4.2.32
To check your current version issue the following command: $ ntk sys version 4.2.28 If version is 4.2.xx you can update automatically, you just need...
Wed, 30 Sep, 2020 at 12:55 PM
Increasing number of max simultaneous requests for NtkAS
Though the number of requests towards Notakey Authentication Server  (NtkAS) service tends to be low, there can be cases where this has to be increased.  ...
Fri, 9 Oct, 2020 at 8:13 PM
Fixing VRRP state changes caused by "Receive advertisement timeout"
In some cases when load is high you may observe the following error in vrrp logs (docker logs vrrp).  Tue Nov 17 02:26:36 2020: (nas) Receive advertisemen...
Tue, 17 Nov, 2020 at 1:38 PM
Starting a custom Authentication Server version
There may be some cases where you need to start a custom authentication service version, that does not follow the official update rollout installed with &qu...
Fri, 30 Jul, 2021 at 1:38 PM
Radius service plugin (no user configuration needed)
Radius plugin is based on modified freeradius container.  Default configuration if no env parameters are provided is: SECRET = Notakey PASSWORD = nota...
Tue, 10 May, 2022 at 9:13 AM
Enabling metrics from Notakey Authentication server
Latest versions of out Authentication server provide various operational metrics that allow monitoring service usage and create alerts for anomalies. Metric...
Tue, 14 Sep, 2021 at 11:52 AM
Notakey Appliance service scaling guide
The services in Notakey Appliance are by default configured for small user number and minimal resource usage as defined by minimal requirements. If you see ...
Thu, 20 Jan, 2022 at 9:49 AM
Configuring SSO service session storage
By default SSO service stores session in distributed cluster key-value storage provided by consul. This allows great failure tolerance and guarantees read-w...
Thu, 20 Jan, 2022 at 9:46 AM
Various workarounds related to Let's Encrypt DST Root CA X3 expiry
Android Notakey Authenticator application Solution on client side: On the Android you can manually disable the certificate "Digital Signature T...
Fri, 8 Oct, 2021 at 10:56 AM