Troubleshooting the Command Relay Workload

This page provides help for issues and questions you might encounter related to the Command Relay.

Command Relay Diagnostic Tool

The Delinea Platform provides a tool called crdiag.exe to help diagnose potential issues with the Command Relay. This tool is located in the same folder where the workload CommandRelay.exe is installed; typically, this is C:\ProgramData\Delinea Engine\data\runtime\delinea\command-relay\<version>.

Invoke crdiag.exe or run it from the command line to get the diagnostics output.

Selected Secret (Domain Admin Account) for Command Relay Stopped Working

Command Relay could stop working if the sharing status of the secret is changed. For example, if you move the secret to a personal folder in Secret Server after it is selected, the Delinea Workload Service shared permissions on the secret are removed. This causes permission failure in Command Relay.

To fix this type of issue:

1. Navigate to the Engine Management page.

2. Click the site name, then the Settings tab.

3. Under Command Relay, click Edit, then click the Select link.

4. Use the credential secret picker to select the credential secret again.

5. Click Save to update permissions and share the secret with the workload again.

Command Relay might also experience issues if the underlying domain account associated with this secret is changed; for example, password expired or not synced, account locked, AD permissions removed, and so on. Check the Command Relay logs to find logon failures with error details.