Difference between revisions of "Internal SekureID Communication"

From sbv.wiki
Jump to: navigation, search
(Get the information on the latest punch for the selected serial number)
Line 1: Line 1:
 
This document an internal document for SBV to troubleshoot communication issues with SekureID clocks.
 
This document an internal document for SBV to troubleshoot communication issues with SekureID clocks.
  
Typically, the client will notify SBV that punches are not showing in the software. There could also be an issue that new employees are not appearing in the clock. Before getting the client involved you need to determine if there is a communication issue. For example, if tasks were not running then punches will not be in the software. Punches could also be in Unassigned and not on the time cards.
+
Typically, the client will notify SBV that punches are not showing in the software. There could also be an issue that new employees are not appearing in the clock. Before getting the client involved you need to determine if there is actually a communication issue. For example, if tasks were not running then punches will not be in the software. Punches could also be unassigned and not on the time cards.
  
Once it is determined that it is not software related then you will need to diagnose from the SBV26 communications server.
+
You will be using both the SekureID utility and advanced troubleshooting can use SQL Server Management Studio. Avoid using queries that are SELECT * and instead use TOP N where N is the number of records that you need and use ORDER BY so that the information you are looking for appears first.
 
+
You will be using both the SekureID utility and SQL Server Management Studio. Avoid using queries that are SELECT * and instead use TOP N where N is the number of records that you need and use ORDER BY so that the information you are looking for appears first.
+
  
 
[[File:sekureidshortcut.png|100px]]
 
[[File:sekureidshortcut.png|100px]]
  
[[File:sekureidutility.png|600px]]
+
(insert a picture here of the top part of the utility to show selecting company/ serial number)
  
==Get the information on the latest punch for the selected serial number==
+
==Get The Latest Punch==
  
This is done in Communication / Time Logs tab. Click on Get Latest Punch Received button. This is the equivalent to this SQL:
+
From the Communication / Time Logs tab, click on Get Latest Punch Received button. This is equivalent to this SQL:
  
 
  <nowiki>
 
  <nowiki>
SELECT TOP 1 * from TimeLog where SerialNumber = 'serial number' ORDER BY LogID DESC
+
SELECT TOP 1 * from TimeLog where SerialNumber = 'serial number' ORDER BY LogID DESC</nowiki>
</nowiki>
+
  
The first thing to ask the client is if there are any X’s on either of the icons in the top right corner of the main screen. If they say Yes, you need to tell them to reboot the clock. In order to reboot the clock, if there are supervisors set, the one rebooting will have to be a supervisor. The proper way to do this is by telling them to go to click on the three dashes in the top left corner of the main screen and then going into the Settings menu of the clock and at the bottom of the options under Settings, you will see one that says Reboot. Click on that and then click Yes when the clock asks. Once rebooted confirm there are no X’s on either of the two icons. If there are still X’s, have them pull the power to the clock and then plug it back in. If there are still X’s on any of the icons, see the section at the bottom to further troubleshoot.
+
The punch date and time will be displayed and whether it has been processed by the software. YOu can also click on Get Latest Processed Punch Received to see what the latest punch in the software should be. If thee is a significant time gap between these 2 punches then the software may not be processing the punches.
  
If there are no X’s, punches should be coming in at the next synching period, but we can double check that everything is good by checking communication and data on the SBV26 server.
+
When it is confirmed that the latest punch received is not the latest punch made on the time clock, you will now send a message to the time clock to see if you can get a response. From the Communication / Time Logs tab, click Request Connection Status From Single Clock.
  
==Testing Communication on SBV 26==
+
[[File:sekureidutility.png|600px]]
  
We test for response from the clock by going onto SBV 26 and using the Sekure ID Client utility (found on the desktop). Once you have the utility open, select the company from the Company Code list, and the clock’s Serial Number. Under the Connection/Time Logs tab, click the Request Connection Status From Single Clock button.
+
Wait a few seconds and then click Get Latest Device Connection Changed Log. If the clock displays a log that indicates that it was just created and the value is "true" then the clock is communicating. Refer to the Resend Time Logs section.
  
 +
This is equivalent to this SQL:
  
Once clicked, open up SQL and run or copy and paste the query below:
+
<nowiki>
 +
SELECT TOP 1 * FROM AdminLog WHERE SerialNumber = 'serial number' AND MessageType = 'DeviceConnectionChanged' ORDER BY CreatedDateTime DESC</nowiki>
  
'''select * from AdminLog where SerialNumber = 'Type serial number of the clock you chose in step 2' order by CreatedDateTime desc'''
+
If the latest device connection change log was not recent or has a value of false then we now need to involve the client.
  
This will order all of the most current communication with that clock at the top of the results. Check the column called CreatedDateTime to confirm that the most recent result is the one you just prompted via the SekureID utility.  
+
Ask the client is if there are any X’s on either of the icons in the top right corner of the time clock's main screen. You can refer to this page (add link). Removing the power for a few minutes and plugging back in can also be done by the client.
  
If response is True:
+
If there are no X’s, punches will start to upload and you can use the Get Latest Punch Received button to confirm this. There may be a need to resend punches if the clock was offline for a long time. Refer to the Resend Time Logs section.
Check for latest punches from the clock’s TimeLog (by copying and pasting the query below) and look at the Processed column.  
+
  
 +
==Resend Time Logs==
  
 +
==Removing Session from the Hive==
  
[[File:adminlog.png|1000px]]
+
***true response from admin, and no punches from the resend
  
 +
then you can go to the Hive on SBV 26 and clear the session to see if this kickstarts the punches to come in. keep in mind, this is VERY rare and does not happen often so this should be more a “last result” type of thing. Doing this will not do any harm but shouldn't be done unless needed to.
  
 +
Go to the internet on SBV 26, and type into the internet,
  
==Releasing a Lock==
+
http://localhost:8080/
  
If we have latest punches and they are processed then there is no issue – we give client an example “We see punches, e.g. # 12345, is there a specific employee that you do not see punches for?” as it could be that they didn’t check since the punches came in.
+
Type in the username, admin, and the password is hivemq. All lowercase.
  
If we have latest punches and they are not processed (there is a ‘0’ under the Processed column) then resolution is in the software, e.g. lock on processing, or lock on employee – “the clock is communicating successfully. The punches had not been processed onto the time cards”
+
Click on Clients on the left-hand side of the page and under Client ID, type in the serial number of the clock you are having an issue with.
  
Search for locks using the SQL Server on the server that the clients TA software is located on using the query;
+
[[File:hive.png|600px]]
  
'''select * from lock'''
+
Once you have the client open, you will see an option that says Remove Session. Click on that and click Yes to the question it asks and then go back to the SQL and run the AdminLog and PunchLog again and see if anything is coming in.
  
[[File:sqllock.png|600px]]
+
[[File:removesession.png|600px]]
  
In the column that says LockableObjectType, you will have two types of numbers. One will be 134 and one will be 10. The 134 means that someone, either the automatic polling or a user is polling the one or multiple time clocks. The 10 is the task that processes the punches.
+
==Further Troubleshooting (Advanced) ==
  
Look at the LockDateTime column to see when the lock was actually taken. If it was within the last few minutes then chances are it is the automatic polling and processing from the task scheduler. If it was more than a few hours ago then it could be when the software doing the overnight task it lost connection or communication to the clock and it created a lock which holds for about 12 hours. In order to release this lock you can copy and paste the query below into SQL.
+
If after a reboot they still have an X on the network icon and database icon, then you should probably have their IT contact us and we can work with them to get it connected properly.
  
'''Delete from lock where pklockID = ‘The ID of the lock you want to release’'''
+
admin is false
 +
network is true
 +
database is false
  
[[File:deletelock.png|600px]]
+
either firewall or remove hive session
  
 +
If after the reboot you have a good network icon, but no database connection, then you can try doing the Hive session in the instructions above or have their IT contact us to see if there are any firewall issues/restrictions.
  
 +
[[File:adminlog.png|1000px]]
  
==Removing Session from the Hive==
+
==Software Not Processing==
  
If we do not have punches in the TimeLog, but we have True response, then you can go to the Hive on SBV 26 and clear the session to see if this kickstarts the punches to come in. keep in mind, this is VERY rare and does not happen often so this should be more a “last result” type of thing. Doing this will not do any harm but shouldn't be done unless needed to.
+
[[File:sqllock.png|600px]]
  
Go to the internet on SBV 26, and type into the internet,  
+
In the column that says LockableObjectType, you will have two types of numbers. One will be 134 and one will be 10. The 134 means that someone, either the automatic polling or a user is polling the one or multiple time clocks. The 10 is the task that processes the punches.
  
http://localhost:8080/
+
Look at the LockDateTime column to see when the lock was actually taken. If it was within the last few minutes then chances are it is the automatic polling and processing from the task scheduler. If it was more than a few hours ago then it could be when the software doing the overnight task it lost connection or communication to the clock and it created a lock which holds for about 12 hours. In order to release this lock you can copy and paste the query below into SQL.
  
Type in the username, admin, and the password is hivemq. All lowercase. 
+
'''Delete from lock where pklockID = ‘The ID of the lock you want to release’'''
  
Click on Clients on the left-hand side of the page and under Client ID, type in the serial number of the clock you are having an issue with.
+
[[File:deletelock.png|600px]]
  
[[File:hive.png|600px]]
 
  
Once you have the client open, you will see an option that says Remove Session. Click on that and click Yes to the question it asks and then go back to the SQL and run the AdminLog and PunchLog again and see if anything is coming in.
+
==Releasing a Lock==
  
[[File:removesession.png|600px]]
+
If we have latest punches and they are processed then there is no issue – we give client an example “We see punches, e.g. # 12345, is there a specific employee that you do not see punches for?” as it could be that they didn’t check since the punches came in.
  
==Further Troubleshooting==
+
If we have latest punches and they are not processed (there is a ‘0’ under the Processed column) then resolution is in the software, e.g. lock on processing, or lock on employee – “the clock is communicating successfully. The punches had not been processed onto the time cards”
  
If after a reboot they still have an X on the network icon and database icon, then you should probably have their IT contact us and we can work with them to get it connected properly.
+
Search for locks using the SQL Server on the server that the clients TA software is located on using the query;
  
If after the reboot you have a good network icon, but no database connection, then you can try doing the Hive session in the instructions above or have their IT contact us to see if there are any firewall issues/restrictions.
+
'''select * from lock'''
 +
 
 +
Once it is determined that it is not software related then you will need to diagnose from the SBV26 communications server.

Revision as of 18:28, 30 June 2020

This document an internal document for SBV to troubleshoot communication issues with SekureID clocks.

Typically, the client will notify SBV that punches are not showing in the software. There could also be an issue that new employees are not appearing in the clock. Before getting the client involved you need to determine if there is actually a communication issue. For example, if tasks were not running then punches will not be in the software. Punches could also be unassigned and not on the time cards.

You will be using both the SekureID utility and advanced troubleshooting can use SQL Server Management Studio. Avoid using queries that are SELECT * and instead use TOP N where N is the number of records that you need and use ORDER BY so that the information you are looking for appears first.

Sekureidshortcut.png

(insert a picture here of the top part of the utility to show selecting company/ serial number)

Get The Latest Punch

From the Communication / Time Logs tab, click on Get Latest Punch Received button. This is equivalent to this SQL:

SELECT TOP 1 * from TimeLog where SerialNumber = 'serial number' ORDER BY LogID DESC

The punch date and time will be displayed and whether it has been processed by the software. YOu can also click on Get Latest Processed Punch Received to see what the latest punch in the software should be. If thee is a significant time gap between these 2 punches then the software may not be processing the punches.

When it is confirmed that the latest punch received is not the latest punch made on the time clock, you will now send a message to the time clock to see if you can get a response. From the Communication / Time Logs tab, click Request Connection Status From Single Clock.

Sekureidutility.png

Wait a few seconds and then click Get Latest Device Connection Changed Log. If the clock displays a log that indicates that it was just created and the value is "true" then the clock is communicating. Refer to the Resend Time Logs section.

This is equivalent to this SQL:

SELECT TOP 1 * FROM AdminLog WHERE SerialNumber = 'serial number' AND MessageType = 'DeviceConnectionChanged' ORDER BY CreatedDateTime DESC

If the latest device connection change log was not recent or has a value of false then we now need to involve the client.

Ask the client is if there are any X’s on either of the icons in the top right corner of the time clock's main screen. You can refer to this page (add link). Removing the power for a few minutes and plugging back in can also be done by the client.

If there are no X’s, punches will start to upload and you can use the Get Latest Punch Received button to confirm this. There may be a need to resend punches if the clock was offline for a long time. Refer to the Resend Time Logs section.

Resend Time Logs

Removing Session from the Hive

      • true response from admin, and no punches from the resend

then you can go to the Hive on SBV 26 and clear the session to see if this kickstarts the punches to come in. keep in mind, this is VERY rare and does not happen often so this should be more a “last result” type of thing. Doing this will not do any harm but shouldn't be done unless needed to.

Go to the internet on SBV 26, and type into the internet,

http://localhost:8080/

Type in the username, admin, and the password is hivemq. All lowercase.

Click on Clients on the left-hand side of the page and under Client ID, type in the serial number of the clock you are having an issue with.

Hive.png

Once you have the client open, you will see an option that says Remove Session. Click on that and click Yes to the question it asks and then go back to the SQL and run the AdminLog and PunchLog again and see if anything is coming in.

Removesession.png

Further Troubleshooting (Advanced)

If after a reboot they still have an X on the network icon and database icon, then you should probably have their IT contact us and we can work with them to get it connected properly.

admin is false network is true database is false

either firewall or remove hive session

If after the reboot you have a good network icon, but no database connection, then you can try doing the Hive session in the instructions above or have their IT contact us to see if there are any firewall issues/restrictions.

Adminlog.png

Software Not Processing

Sqllock.png

In the column that says LockableObjectType, you will have two types of numbers. One will be 134 and one will be 10. The 134 means that someone, either the automatic polling or a user is polling the one or multiple time clocks. The 10 is the task that processes the punches.

Look at the LockDateTime column to see when the lock was actually taken. If it was within the last few minutes then chances are it is the automatic polling and processing from the task scheduler. If it was more than a few hours ago then it could be when the software doing the overnight task it lost connection or communication to the clock and it created a lock which holds for about 12 hours. In order to release this lock you can copy and paste the query below into SQL.

Delete from lock where pklockID = ‘The ID of the lock you want to release’

Deletelock.png


Releasing a Lock

If we have latest punches and they are processed then there is no issue – we give client an example “We see punches, e.g. # 12345, is there a specific employee that you do not see punches for?” as it could be that they didn’t check since the punches came in.

If we have latest punches and they are not processed (there is a ‘0’ under the Processed column) then resolution is in the software, e.g. lock on processing, or lock on employee – “the clock is communicating successfully. The punches had not been processed onto the time cards”

Search for locks using the SQL Server on the server that the clients TA software is located on using the query;

select * from lock

Once it is determined that it is not software related then you will need to diagnose from the SBV26 communications server.