FAQ

Common issues and their solutions

Using external load balancer for appliance services
Normally TLS for HTTP requests is terminated on built in reverse proxy, but if application needs to be scaled over multiple hosts, this can be changed.  ...
Wed, 13 Oct, 2021 at 11:25 AM
Increasing number of max simultaneous requests for NtkAS
Though the number of requests towards Notakey Authentication Server  (NtkAS) service tends to be low, there can be cases where this has to be increased.  ...
Fri, 9 Oct, 2020 at 8:13 PM
Fixing VRRP state changes caused by "Receive advertisement timeout"
In some cases when load is high you may observe the following error in vrrp logs (docker logs vrrp).  Tue Nov 17 02:26:36 2020: (nas) Receive advertisemen...
Tue, 17 Nov, 2020 at 1:38 PM
Starting a custom Authentication Server version
There may be some cases where you need to start a custom authentication service version, that does not follow the official update rollout installed with &qu...
Fri, 30 Jul, 2021 at 1:38 PM
Radius service plugin (no user configuration needed)
Radius plugin is based on modified freeradius container.  Default configuration if no env parameters are provided is: SECRET = Notakey PASSWO...
Thu, 5 Aug, 2021 at 3:21 PM
Enabling metrics from Notakey Authentication server
Latest versions of out Authentication server provide various operational metrics that allow monitoring service usage and create alerts for anomalies. Metric...
Tue, 14 Sep, 2021 at 11:52 AM
Configuring SSO service session storage
By default SSO service stores session in distributed cluster key-value storage provided by consul. This allows great failure tolerance and guarantees read-w...
Wed, 22 Sep, 2021 at 11:42 AM
Various workarounds related to Let's Encrypt DST Root CA X3 expiry
Android Notakey Authenticator application Solution on client side: On the Android you can manually disable the certificate "Digital Signature T...
Fri, 8 Oct, 2021 at 10:56 AM
Can't renew the license.
Please update Dashboard to the latest version. ($ ntk sys update) Due to the changes in the licensing policy versions prior 4.0.11 are not allowed to manag...
Sat, 23 Oct, 2021 at 11:18 AM
Securing REDIS with password authentication
Since version 5.0.27 of Notakey Appliance CLI tools it is possible to specify password for REDIS distributed cache service.  Enable password for REDIS s...
Wed, 24 Nov, 2021 at 5:55 PM