Troubleshooting for Each HENNGE One Service

• Please follow the troubleshooting steps in the following article.
  How to resolve issues connecting to Microsoft 365 with Outlook

• The status of HDE One Directory Sync may be affecting this. Please check the following article.
  Active Directory Integration: Troubleshooting Password Synchronization

• Please check if your browser is set to accept cookies.
• Please check if cookies and other data are being deleted when clearing your browsing history.
• Please check if your security software is set to periodically delete cookies.
• Please check if your browser is set to automatically delete browsing history every time you close it.
• Please check from the following URL whether the Entrance Pass is being distributed correctly.
  https://ap.ssso.hdems.com/entrancepasscheck/[your_domain]/
  *Please replace [your_domain] with your contracted domain.
  *Reference link: How to check if the Entrance Pass cookie is being distributed to the browser correctly
• Please check if the relevant user is assigned to an access policy group that allows Entrance Pass login.

Access Control displays the login screen to users based on authentication requests from Microsoft 365, so it is possible that the authentication request from Microsoft 365 is not reaching Access Control.
There are cases where the following Office and Windows troubleshooting steps have resolved the issue, so please try them.

• For Windows 10 or later, clear the Microsoft Edge browser cache.
  * Reference link: How to clear cache
  * Office client applications on Windows 10 or later perform authentication via Microsoft Edge, so authentication issues may occur due to browser cache.
• For Windows 10 or later, disconnect the Microsoft 365 account connected to the device.
  1. Click the [Start] button and then click [Settings].
  2. In the [Windows Settings] screen, click [Accounts].
  3. Click [Access work or school] on the left side of the screen.
  4. If the Microsoft 365 account is displayed and connected on this screen, click the account and select "Disconnect".
• Repair Office apps and use the Microsoft Support and Recovery Assistant tool.
  *Reference links
  Repair Office applications
  About Microsoft Support and Recovery Assistant
• Delete credentials
  1. Click [Start] - [Control Panel].
  2. Click [User Accounts] - [Credential Manager].
  3. Click and expand the relevant credentials.
  4. Click [Remove from vault] and delete all credentials containing the following keywords:
  - Credentials containing [outlook]
  - Credentials containing [office365]
  - Credentials containing [onmicrosoft.com]
  - Credentials containing [MicrosoftOffice1x ~ SSPI]
  - Credentials containing [ADAL]
  - Credentials containing [Autodiscover]
• Recreate Windows profile
  * Reference link
  Create a local user or admin account in Windows
• Windows Update (After applying updates, please restart the device.)
  * Reference link
  Update Windows
   

The bookmarked URL may be incorrect.
If there are unnecessary characters after https://ap.ssso.hdems.com/portal/{domain_name}/login/ in your bookmark, please remove them.

• Close all apps running in the background. Then try launching the app again.
• If the device OS is not supported, please update to a supported version.
• If the app is not the latest version, please update to the latest version.
• Restart the device.
• Reinstall Secure Browser.
• Check if the issue occurs when logging in with the affected account on Secure Browser on a device where the issue does not occur.
• Check if the issue occurs when logging in with an unaffected account on Secure Browser on the affected device.

• Close all apps running in the background. Then try launching the app again.
• If the device OS is not supported, please update to a supported version.
• If the app is not the latest version, please update to the latest version.
• Restart the device.
• Check if the device has sufficient memory.
• Change the network you are using (e.g., carrier network → Wi-Fi, etc.).
• Reinstall Secure Browser.
• Try using a supported browser other than Secure Browser (e.g., from a corporate network environment).
  *Reference link: HENNGE One System Requirements

• Please try the steps described in Unread notifications are not received / not displayed.
• There are cases where the following steps have resolved the issue, so please try them.
  1. Access the Secure Browser settings screen in the HENNGE User Portal.
  https://ap.ssso.hdems.com/portal/[your_domain]/hsb/
  *Please replace [your_domain] with your contracted domain.
  2. Click [Settings] for the device that stopped receiving new email notifications.
  3. Change the Check Target to [Do not send notifications for new emails.] and click Send.
  4. After a few minutes, select [Send notifications only for new emails in the inbox.] and click Send.
• If the device OS is not supported, please update to a supported version.
• If the app is not the latest version, please update to the latest version.
• Restart the device.
• Reinstall Secure Browser.

• Please check the error code and solution for each device OS from the following link.
  *Reference link: HENNGE One Error Message Collection
• Check if communication from the client device to the following FQDN is blocked by a web proxy or web filtering function.
  cybertrust.deviceid.ne.jp
• Check if you are registering using MAC address or IMEI on Android 11 or later.
  Reference link: Device Certificate Installation (Android 11 or later)

• Allow the FQDN used for Device Certificates.
  *Reference link: FQDN (URL) or IP addresses to allow when using web proxy or web filtering functions
• Check if the certificate is installed correctly.
  *Reference link: [Device Certificate] How to check the installation status of Device Certificates
  If not, please reinstall the certificate and check if you can log in with the certificate.
• Register https://verify.ssso.hdems.com in [Trusted Sites] in Internet Options.
• If https://verify.ssso.hdems.com is registered in [Compatibility View Settings], please remove it.
• Change the network you are connecting to.
• Clear the device's DNS resolver cache.
  - Open Command Prompt as an administrator and run the following command:
  ipconfig /flushdns

• On iOS and iPad OS, due to OS restrictions, logging in with a certificate is only possible with the Safari browser.
  *Reference link: Device Certificate: Restrictions when using Device Certificates on iOS / iPad OS
• For instructions on using certificates with Firefox on Windows and Mac devices, please refer to the following.
  *Reference link: [Notice] Confirmed behavior allowing Device Certificate loading in Firefox
• The installed Device Certificate may be corrupted or missing for some reason.
  Please check the installation status of the Device Certificate, and if it cannot be used properly, please reinstall the Device Certificate.
  *Reference link: [Device Certificate] How to check the installation status of Device Certificates
  *Reference link: [Device Certificate] Resending the Device Certificate installation guidance email

• Please check that you did not click [No] on the "Security Warning" screen during certificate installation.
  *If you click [No] on the warning to install the root CA certificate, a 600 error will occur.
• If you are using a "local user account," there may be an issue with the user profile for that account. If possible, please recreate the user profile (account) and try the certificate installation again.
• If you are using a "domain user account," please check if there are any restrictions set by group policy, etc.
• If the above checks do not resolve the issue, please provide the DeviceiDImporter log file stored in the following location and the [Device Certificate Information] from the Device Certificate issuance email to HENNGE One Technical Support.
  <Log storage location>
  C:\Users\<username>\AppData\Local\CybertrustDeviceiDImporter
  *The AppData folder is hidden.
  <File name>
  CybertrustDeviceidImporter.log

• If the browser on Android is set to display the PC site, this error may occur. Please disable PC site mode and try again.
  *Reference image: Setting location in Chrome for Android
  

• If you have received an error email, please check the following articles.
  Common types of error emails
  About sending restrictions for the Email DLP service

Please refer to the following article.
Check Email Delivery Logs

Please refer to the following article.
[Email DLP] Best Practices When Email Is Marked as Spam, Quarantined, or Rejected by the Recipient Mail Server

Please refer to the following article.
[Email DLP] What to Do If the ZIP File Password Notification Email Is Not Received

• Download the ZIP file to your desktop and use the OS default extraction tool.
  Extraction Tools/Software Compatible with ZIP Encryption
• Check if there is a space at the end of the password. If the issue persists, please refer to the following article.
  Cannot Extract ZIP File Even After Entering the Password Generated by Email DLP Automatic Encryption

• Proxy or URL filtering settings may be affecting access. For more details, please refer to the following article.
  Unable to Operate Email from the Email DLP User Console

• This is expected behavior, so there is no need for concern.
  Multiple Notification Messages Received Even Though Only One Email Was Sent 

• Please refer to the following article.
  [Email DLP] Authentication Code for File Download Not Received

• Check if the error also occurs when accessing the Secure Transfer URL directly. If direct access is possible, the error may be caused by Google Workspace, not Secure Transfer.

• In the Access Control administration screen, under [Access Policy Groups] > [Accepted Service Providers], check if the provider setting for Secure Transfer is selected.

• Review your current network environment and try uploading again from a stable connection.
• Try uploading in an environment that does not use a proxy.
• Allow the FQDN for Secure Transfer.
  HENNGE One System Requirements

• Please refer to the following article.
  [Email DLP] Authentication Code for File Download Not Received

• Please send a screenshot of the screen showing the error message and the login account name used during the search to HENNGE One Technical Support.

• Check if you are trying to log in with a newly created account.
  If you are logging in with a newly created account, you may need to wait a certain period before you can log in.
• Check if you are logged in from multiple sessions. Multiple logins are not supported.
• If an error message is displayed when you cannot log in, please send it to HENNGE One Technical Support.
• If the error "Login failed. Login from an unauthorized IP address." is displayed, the source IP address is restricted. Please log in from an accepted IP address.

• Please provide the Job ID to HENNGE One Technical Support.

• Try shortening the search period or simplifying the search conditions and try again.

• If your organization controls app permissions in Google Workspace, please try the following steps.
  1. Log in to the Google Workspace administration console.
  2. Go to [Security] - [Access and Data Control] - [API Controls] - [Manage Third-Party App Access] - [X Connected Apps] and click [View List].
  3. Search for "File DLP".
  4. Click [Change Access].
     * File DLP will appear twice; select the one where "Google Workspace Admin Console" is shown in the [Requested Service] column.
  5. Select the access target and permission type according to your company policy, then click [Change Access].
  6. Try the API connection again.
     File DLP Integration Settings with Various Services