6.0 Troubleshooting

To obtain the debug logs for ADFS MFA plug-in, perform the following steps:

  1. Run DiagTool.exe (the tool must have Microsoft .NET Framework 3.5 installed).

  2. Click Clear All in the Debug logs tab.

  3. Click Enable.

  4. Restart the system.

  5. Reproduce your problem.

  6. Run DiagTool.exe.

  7. Click Save logs in the Debug logs tab.

  8. Specify a file name and path.

  9. Click Save.

  10. Click Disable.

  11. Click Clear All.

If you do not have the Diagnostic Tool, you can perform the actions manually:

  1. Create a text file config.properties in the folder C:\ProgramData\NetIQ\Logging\.

  2. Add a string to the file: logEnabled=True that ends with a line break.

  3. Create a directory: C:\ProgramData\NetIQ\Logging\Logs\.

  4. Restart the machine.

  5. Reproduce your problem.

  6. Pack the logs located in the folder C:\ProgramData\NetIQ\Logging\Logs\ into a zip file.

  7. Change logEnabled=True to logEnabled=False in the folder C:\ProgramData\NetIQ\Logging\config.properties

With the Diagnostic Tool, you can check the network problems on a workstation, issues in connection between a workstation and DNS Server, and to get a list of the Advanced Authentication Servers that can be discovered. To do this, perform the following steps:

  1. Run DiagTool.exe (the tool must have Microsoft .NET Framework 3.5 installed).

  2. Switch to the Servers tab.

  3. In the Search settings you must enter FQDN in Domain and click Search. A list of Advanced Authentication Servers is displayed.

  4. If the list is not displayed, clear Use system DNS server and enter the IP address of your DNS server in DNS server and click Search again.