Censusby Steward IT

Documentation › Help

Troubleshooting

The web interface#

Browser warns about the certificate. Expected with the built-in self-signed certificate; continue to the site. To remove the warning, get a free Let's Encrypt certificate under Configuration › HTTPS certificate (see HTTPS certificate), or install your own (see Installation).

Can't reach https://server:8443 from other computers. Allow inbound TCP 8443 in the server's firewall. Check that the service is running (census-server status).

Forgot the admin password. Run census-server reset-password -user admin on the server.

Scanning#

A scan finds nothing. Make sure the range is correct and routable from the server. Hosts that block all 47 probed ports and ping can't be discovered; use the Census agent for those.

Devices are found but have no hardware/software details. They need credentials (WinRM, SSH, SNMP) or the agent. The Discovered but never inventoried report lists them. Scan history shows "login failed" when credentials were tried and rejected.

WinRM: "401 Unauthorized" / login failed.

  • The account must be a local administrator on the target.
  • For local (non-domain) accounts other than the built-in Administrator, set LocalAccountTokenFilterPolicy (see Credentials).
  • Try the username as COMPUTER\user or just user.

WinRM: connection refused / timeout. WinRM isn't enabled or the firewall blocks 5985. Run Enable-PSRemoting -Force on the target or configure it by Group Policy.

SSH: "host key changed". The server was rebuilt or something is impersonating it. If the change is expected, clear the key under Configuration › General settings › SSH host keys.

No serial number on Linux. Reading /sys/class/dmi/id/product_serial needs root. Use root or passwordless sudo, or the agent (runs as root).

A device has the wrong type. Change it on the asset's Manage tab, or set a vendor type or MAC vendor entry so future scans get it right.

Many devices show "Private MAC (randomized)". Those are phones, tablets, TVs and similar devices using private Wi-Fi addresses (see Network scanning).

"License limit reached" in scan history. New devices weren't added. Archive retired assets or add licenses (see Licensing).

Census agent#

install says "test report failed". The message tells you why:

Message Fix
connection refused / timeout Wrong server URL, or port 8443 is blocked between the computer and the server
certificate fingerprint mismatch The fingerprint is wrong, or the server certificate was replaced; copy it again from the Census agents page
invalid agent key Key mistyped or rotated; copy it from the Census agents page
license asset limit reached Free up or add licenses

The installer link points to localhost. Browse to the console by the server's network name, or set Server URL in General settings, then download the installer again.

An agent shows as offline. Check that the Census Agent service is running on the computer and that it can reach the server on 8443.

Uptime looks wrong. Steward IT Census shows the real last boot, even with Windows Fast Startup. If it still looks wrong, rescan the asset.

Deployment & actions#

"No Census agent online and no WinRM credential for this asset" (or SSH). Add or map a credential under Scanning › Credentials, or install the Census agent on that computer.

Package downloads fail on targets. Targets download files from the Server URL. Make sure that address resolves and port 8443 is reachable from the targets.

Installer hangs until the timeout. It's waiting for input on an invisible screen. Use its silent switches (/qn, /S, /VERYSILENT…).

Exit code 3010. "Success, reboot required." It's included in the default success codes for installers.

Launcher action does nothing. Install the Census Action Launcher on your PC (see Asset actions) and allow your browser to open it.

License#

  • "License key … is registered to another server" (banner) or "this key is for another server": Census is running on a different server than the key was issued for. The key keeps working for 30 days from the change. Contact Steward IT with this server's Server ID from Configuration › License for a replacement key. See Licensing.
  • "Server ID can't be read": on Linux, only root may read the server's ID by default. The installed service runs as root, and install also lets the user who ran it (through sudo) read it. If you run the server by hand as a normal user, run sudo census-server grant-hwid once (it adds you to the steward-census group; sign out and in again), or install it as a service. If it still can't be read, contact Steward IT.

Logs#

  • Windows: Event Viewer › Windows Logs › Application, source Steward IT Census Server / Census Agent.
  • Linux: journalctl -u StewardCensusServer and journalctl -u CensusAgent.