You are viewing limited content. For full access, please sign in.

Question

Question

LfWebOffice110 OfficePlugin -Could not find a valid certificate

asked on April 12, 2021

Dears,

After installing the office plugin for WebClient 11 "LfWebOffice110", I'm getting this message;

And I can't open any office document to edit from the web-client, each time system is showing this message.

A already downloaded and installed the Office Plugin.

1 0

Answer

SELECTED ANSWER
replied on April 13, 2021

The url for the certificate it is downloading is https://public-laserfichelocalhost-certificate.s3-us-west-1.amazonaws.com/lflocalhost.pfx. See if you can download that file in a web browser, it might need to be whitelisted.

Another option is to download the file I linked above and save it to %localappdata%\Laserfiche\Webtools Agent\Certificates (e.g. C:\Users\username\AppData\Local\Laserfiche\Webtools Agent\Certificates) and then restart webtools agent (bullet point 2 below).

 

If that doesn't work, enable debug logging to get more detailed logs:

1. Run C:\Program Files (x86)\Laserfiche\Webtools Agent\LoggingUtility.exe and check "Enable debug logging"

2. Restart webtools agent: from task manager, kill "Laserfiche Webtools Agent.exe", then restart it by running C:\Program Files (x86)\Laserfiche\Webtools Agent\Laserfiche Webtools Agent.exe

3. Inspect the logs in the log folder, look for "Error downloading" within the log files.

 

 

0 0

Replies

replied on April 12, 2021

The Laserfiche Webtools Agent should automatically download the latest certificate that it needs, unless a proxy or firewall is blocking it.  Check the log files in %localappdata%\Laserfiche\Webtools Agent\Logs  (e.g. C:\Users\username\AppData\Local\Laserfiche\Webtools Agent\Logs) for any errors about downloading the certificate.

0 0
replied on April 13, 2021

Thank you @Robert,

The agent is trying to download from which server ? This issue still occurring when I'm installing the plugin on the Laserfiche server itself.

Could you please explain the requirements than I will send to the Information Security team?

In attachments , you can find the log file.

 

 

0 0
SELECTED ANSWER
replied on April 13, 2021

The url for the certificate it is downloading is https://public-laserfichelocalhost-certificate.s3-us-west-1.amazonaws.com/lflocalhost.pfx. See if you can download that file in a web browser, it might need to be whitelisted.

Another option is to download the file I linked above and save it to %localappdata%\Laserfiche\Webtools Agent\Certificates (e.g. C:\Users\username\AppData\Local\Laserfiche\Webtools Agent\Certificates) and then restart webtools agent (bullet point 2 below).

 

If that doesn't work, enable debug logging to get more detailed logs:

1. Run C:\Program Files (x86)\Laserfiche\Webtools Agent\LoggingUtility.exe and check "Enable debug logging"

2. Restart webtools agent: from task manager, kill "Laserfiche Webtools Agent.exe", then restart it by running C:\Program Files (x86)\Laserfiche\Webtools Agent\Laserfiche Webtools Agent.exe

3. Inspect the logs in the log folder, look for "Error downloading" within the log files.

 

 

0 0
replied on November 26, 2021

Hi Robert,

I'm working on a client site that requires the deployment team to copy the certificate to the %localappdata%\Laserfiche\Webtools Agent\Certificates folder.

The customer would like to know when the certificate expires. I tried viewing  certificate but it requires a password.

Also, to pass the internal change control, could you provide a few words about the purpose of the certificate (other than being required for Web Tools Agent) and what it is used to identify please?

-Ben

0 0
replied on November 29, 2021

Hi Ben, the certificate currently expires on 2021-12-22 but we are in the process of updating it to a new certificate that expires on 2022-12-07.

The certificate is a security feature that ensures the Laserfiche web client is talking to the Webtools Agent and not some other service masquerading as the webtools agent.

1 0
replied on December 1, 2021

Thanks!

0 0
replied on January 26, 2023

@████████- Did you ever determine what was blocking you from being able to download the certificate? We have a customer having the same issue on many machines and is unable to find a network policy that would be blocking this. If we manually go to the URL, it will download but we are hoping to fix the auto-download issue instead of just manually place the Cert in the Certificate folder on all machines.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.