SafeGuard LAN Crypt Administration - The administration console closes down on its own

  • Article ID: 108626
  • Updated: 06 May 2011

Issue
The administration console closes down on its own. This follows an exception being triggered by a MAC review.

Product
SafeGuard LAN Crypt Administartion v.3.51.0.11 and above

Client OS

Windows 7, Windows Vista, Windows XP

Technical background
All entries in the SafeGuard LAN Crypt database are protected with a MAC ( Message Authentication Code) in order to track changes. During every read access to a record, the MAC is reviewed and an exception is triggered if the check detects an error. For security reasons, the administration console is closed immediately and a marker is written in the database indicating the suspicious condition. As long as this flag is set, a warning will be issued when signing on to the administration.

Invalid MACs may be caused by the following:

  • Manual manipulation of the database
    Records are changed or added. Several central tables are additionally protected against deletion of individual records with "vertical" MACs ( group membership, group structure, key assignment, ACLs). Log files are also protected against deletion of individual entries.
  • With Oracle Databases (it has not been seen in MS SQL), automated conversion of the character coding in other codepages may cause "false alarms" or non-verifiable (de facto invalid) MACs. This behavior only occurs when several administrative workstations, with different Oracle codepage settings, are working on the same database. Such situations are recognized by SGLC and the start of a second administrative console is prevented (refer to the Manual, Chapter 3.5.10).
  • Theoretically, MAC errors may also be caused by an incomplete or defective Backup/Restore of the DB.
  • In the past, there were errors in the software that caused incorrect checksums during certain processes. Currently, there are no such known issues left unresolved.

In all of these cases, no loss of data is experienced by the user. For write access to the DB, transactions ensure that the changes are only accepted after the new MACs are calculated.
At the worst, the current action in the administration console cannot be completed.

What to do

If a MAC issue arises, please contact our Support Team for further assistance.




 

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments