Deploying Bluewhale for Outlook
Troubleshooting
When the Bluewhale for Outlook add-in is installed, large attachments are automatically intercepted and uploaded to the Bluewhale Server.
The attachments are replaced by download links, allowing the recipient to download the files while keeping the e-mail itself small.
The user can attach entire folders and files larger than the limit imposed by Exchange by using the buttons on the Bluewhale toolbar.
The Bluewhale trigger size is configured globally and can be adjusted by the user.
Deployment
The Bluewhale for Outlook MSI supports various properties. When installing on a large number of computers, it is recommended to create a cmd/bat-file or transformation file with the desired settings.
If a property is set during installation the corresponding HKLM key will be created.
If a setting is user adjustable the corresponding HKCU key is noted below the HKLM key.
| Property: | BLUEWHALE_SERVER |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\bluewhaleServer |
| Example value: | https://bluewhale.company.com |
| Description: | URL to your Bluewhale Server.
|
| Property: | ACCEPT_ANY_CERT |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\acceptAnyCert |
| Default value: | False |
| Description: | If set to "TRUE" Bluewhale will accept any SSL certificate, including self-signed certificates.
This not recommended for production systems.
|
| Property: | SERVICE_PRINCIPAL |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\kerberosServicePrincipal |
| Example value: | bwservice/bluewhale.company.com@COMPANY.DOMAIN |
| Description: | Kerberos service principal. Used for single-sign-on.
|
| Property: | USE_SSPI |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\useSSPI |
| Example value: | True |
| Description: | Login using the single-sign-on feature (TRUE).
|
| Property: | ENABLE_SEND_SECURE |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\enableSendSecure
|
| Default value: | True |
| Description: | Enables the "Send secure"-button and the extended "Send using Bluewhale"-dialog.
|
| Property: | ASK_BEFORE_BLUEWHALING |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\askBeforeBluewhaling
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\askBeforeBluewhaling |
| Default value: | False |
| Description: | Prompt the user if an e-mail has to be sent by Bluewhale.
|
| Property: | SAVE_PASSWORD |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\savePassword
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\savePassword |
| Default value: | True |
| Description: | Bluewhale for Outlook can store Bluewhale login information in an encrypted form. Only used if single-sign-on is not used.
|
| Property: | LOWER_LIMIT |
| Registry key: | HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\lowerLimit
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\lowerLimit |
| Default value: | 3 |
| Description: | The default Bluewhale attachment size trigger in Mb. Mails with attachments larger than this limit, will be intercepted by Bluewhale.
|
Example Bluewhale for Outlook install cmd/bat script
msiexec.exe /i bwoutlookSetup.msi /qn
BLUEWHALE_SERVER="https://bluewhale.company.com"
SERVICE_PRINCIPAL="bwservice/bluewhale.company.com@COMPANY.DOMAIN"
USE_SSPI="True"
ASK_BEFORE_BLUEWHALING="False"
SAVE_PASSWORD="False"
LOWER_LIMIT="3"
/l* bwinstall.log
Troubleshooting
Bluewhale causes Outlook and Word to crash when the user exits
Microsoft updates KB982524/KB976576 to Microsoft.NET Framework 2.0 Service Pack 2 causes Outlook 2003 and Word 2003 to crash when Bluewhale for Outlook is installed and the user exits the programs. Please upgrade to Bluewhale for Outlook version 1.2.1 to fix this issue.
Bluewhale add-in not visible
If you have installed Bluewhale for Outlook, but the add-in is not showing inside Outlook, please check if the add-in has become disabled.
In Outlook 2007 select Tools > Trust Center. Verify that Bluewhale is not disabled.
In Outlook 2003 select Help > About Microsoft Office Outlook. Select "Disabled elements". Verify that Bluewhale is not disabled.
Unhandled error has occured
Please look for Bluewhale errors in the Event Viewer:
Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".
Description:
Unhandled error has occured
System.ApplicationException:
The 'secman.OutlookSecurityManager' COM object is not registered.
at AddinExpress.Outlook.SecurityManager.set_DisableOOMWarnings(Boolean value)
at bwoutlook.ItemSendHandler.BluewhaleDoneHandler(Object trans, SendResult sendResult)
...
The error is caused by secman.dll not being correctly registered.
Fix by running:
regsvr32 "C:\Program Files\Webholdet\Bluewhale for Outlook\secman.dll"
If you have changed the default installation path, you should replace "C:\Program Files\Webholdet\Bluewhale for Outlook" with your installation path.
Error sending message
Please look for Bluewhale errors in the Event Viewer:
Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".
Description:
Error sending message
System.InvalidCastException:
Unable to cast COM object of type 'Redemption.SafeMailItemClass'
to interface type 'Redemption.ISafeMailItem'.
This operation failed because the QueryInterface
call on the COM component for the interface with
IID '{0A95BE2D-1543-46BE-AD6D-18653034BF87}'
failed due to the following error: Library not registered.
(Exception from HRESULT: 0x8002801D (TYPE_E_LIBNOTREGISTERED)).
at Redemption.SafeMailItemClass.set_Item(Object Value)
at bwoutlook.ItemSendHandler.BluewhaleDoneHandler(Object trans, SendResult sendResult)
The error is caused by Redemption.dll not being correctly registered.
Fix by running:
regsvr32 "C:\Program Files\Webholdet\Bluewhale for Outlook\Redemption.dll"
If you have changed the default installation path, you should replace "C:\Program Files\Webholdet\Bluewhale for Outlook" with your installation path.
Single sign-on errors on Windows 7
Please look for Bluewhale errors in the Event Viewer:
Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".
Description:
Login error. Please check your domain login.
SPN: bluewhale/bluewhale.company.com@COMPANY.LOCAL
Microsoft.Samples.Security.SSPI.SSPIException:
InitializeSecurityContext failed.. Error Code = '80090342'.
at Microsoft.Samples.Security.SSPI.ClientContext..ctor
(ClientCredential credential, String serverPrincipal,
ContextAttributeFlags contextAttributeFlags)
at bwbackend.KerberosManager.DoLogin()
The error is caused by the Kerberos encryption types being undefined (SEC_E_KDC_UNKNOWN_ETYPE / 0x80090342).
The error can be fixed by opening:
Control Panel > Adminstrative Tools > Local Security Policy
Select "Local Policies" > "Network security: Configure encryption types allowed for Kerberos".
Make sure "DES-CBC-MD5" is checked. For best compatibility with other software your should enable all encryption types. Click OK.
