Troubleshooting

If the desk is down, open Tray → Service Status. Start Services after a Safe Shutdown. If LifecycleWatch was paused for shutdown, Start Services clears the pause so the watchdog can protect the stack again.

Missing tray icon: re-run the tray install script from Program Files\Lifecycle (or your install folder) as documented with Setup.

Public instance names need DNS for lifecycle.lol, www, your instance (for example demo), portal, and *.lifecycle.lol pointing at the Cloudflare tunnel that targets port 80 on the node. Without DNS, subdomains fail even if the app is healthy locally.

cloudflared runs as LifecycleTunnel. Tunnel credentials stay on the machine (ProgramData / local data) - not in the app repo.

Passwords, API secrets, and join tokens never belong in a URL. Lifecycle strips credential-like query keys and posts login over HTTPS. Store AD and cluster join secrets in Credential Manager as Setup and Dev instruct.

Microsoft sign-in on hosted lifecycle.lol needs Lifecycle’s platform ENTRA_CLIENT_ID / ENTRA_CLIENT_SECRET on the deployment. That is not the same as linking a customer tenant under Settings → Connections → Entra.

On-prem Microsoft sign-in failures usually mean the desk Entra app Web redirect URI or admin consent under Settings → Connections → Entra.

Domain errors mean personal emails cannot open a shared company instance.

Portal links, return reminders, invites, and password-due mail need Settings → Notifications From. Empty From is the most common reason employees never see the email.

Labels stuck in sandbox: add carrier credentials and turn sandbox preference off only after a successful test. Invalid portal tokens: send a new transfer or replace link from the desk.

Warranty Sync failures: confirm Dell Client ID/Secret under Connections → Warranty and a valid service tag on the asset. Manual dates still work without Sync.