Before you begin
- Record the exact operation, time, edition and installed version before retrying.
- Keep the last successful output. Avoid repeated configuration changes until you know which stage failed.
- Review exported diagnostics before sending them; public endpoint and certificate details may still identify your environment.
1. Capture client connection diagnostics
- On the affected MSP Client, open Configuration → Settings & Credentials → Central MSP Server, or Security & Communications.
- Click Verify Current Secure Connection and read the first failed stage. The diagnostic sequence distinguishes configuration, DNS, TCP, TLS/health, API authentication, compatibility and effective security.
- Click Troubleshooting: OFF - Start to capture the diagnostic report. Let it finish; the control returns to OFF and the saved report/folder opens. If you stop it manually, retain the partial report and say it was stopped.
- If you need to locate the saved report, open
%LOCALAPPDATA%\ITAuditFactory\MSP\Troubleshootingin File Explorer. Use the report matching the failure time. - Read the failure’s stage and message. Correct that layer first, then rerun live verification. A failed TLS handshake is not evidence that the API key is wrong.
2. Capture server or installer diagnostics
- On the server, open Database TLS & Recovery and click Export server troubleshooting report. Read where the file was saved.
- To identify the active data folder, open Server → Open Data Folder. Server reports are stored under its
Troubleshootingfolder; use the configured Data root rather than assuming every installation has the same path. - For a setup failure, use the setup window’s Show technical details and Open Troubleshooting Folder. Retain the stage/error text and matching setup log.
- When checking network reachability from a client, use
Test-NetConnection -ComputerName YOUR_SERVER_HOST -Port YOUR_API_PORTin PowerShell with the actual advertised host and API port. A successful TCP result only shows reachability; still perform application TLS/authentication verification.
3. Send a reproducible support request
- Write a short subject naming the edition and operation, such as “MSP Client 4.1.8 — TLS verification fails after server upgrade.”
- Include the client/server versions, Windows environment, selected security profile, exact menu/button, expected result, actual error and steps that reproduce it. Note whether other clients are affected.
- Attach only the relevant reviewed diagnostic report/log and a cropped screenshot if useful. Remove passwords, API keys, activation keys, private keys and unrelated client evidence.
- Send the report to Support@ITAuditFactory.com. If a later retry succeeds, state what changed and attach the successful verification result separately.
If something goes wrong
DNS or TCP fails
Confirm the advertised hostname resolves to the intended server, verify API port and network/firewall reachability, then retry. Do not change TLS trust to solve a basic reachability failure.
Certificate name/issuer/expiry fails
Use the intended hostname, correct SAN certificate and independently verified CA chain. Expired or revoked certificates require the appropriate replacement/recovery process.
TLS succeeds; authentication/authorization fails
Check credential/device enrollment, account scope, license and synchronized clocks using the diagnostic details. Do not issue broad administrator credentials solely to bypass the error.
Report input is rejected
In C32, duplicate/blank headers, conflicting aliases, malformed CSV rows and missing asset/collector identity are errors. Retain the source file and fix the named record/field; do not remove negative observations to force a report.