Troubleshooting
Sign-in and keys
I lost my security key
- Use another registered key if you have one, and remove the lost key under Settings → Access & SSO → Your security keys → Remove.
- If you have no other key, ask an owner of your environment or SEK Systems support. There is no e-mail reset and there are no recovery codes, on purpose: an account that can approve changes on servers must not be taken over through a mailbox.
- Support first checks your identity through a separate channel. You then get a new password and a one-time setup code (valid 24 hours), and register a new key with them.
- Register a second key right away and test it with Test key.
The key prompt does not appear, or fails
- Use
https://console.sek.systems. Keys are bound to that address; on another address the browser refuses them. - Use a current browser. Firefox, Chrome, Edge and Safari all support security keys and passkeys.
- A hardware key: insert it (or hold it to the NFC reader) before you click Continue with security key, and touch it when it blinks.
- Your phone as key: Bluetooth must be on, on both the computer and the phone, and the phone must be close by.
- A private window may not have access to passkeys stored in your browser profile.
"Your account has no access to SEK Systems yet"
Your sign-in worked, but your account is not a member of an environment. Ask an admin of your organisation for an invitation.
"This invitation is not valid for your account"
The invitation was used, expired (after 7 days), revoked, or is for another e-mail address. Make sure you accept it with the account (SSO, Microsoft, Google or Apple) whose verified e-mail matches the invitation. Otherwise ask for a new invitation.
I keep being asked for my key
Important actions need a step-up: approving, revoking agents, changing roles, inviting, managing identity providers, adding or removing keys. A step-up stays valid for 5 minutes. Owners and admins also confirm with their key at every sign-in.
My session ended
Sessions end after 30 minutes without activity and after 12 hours at most. Your sessions… in the account menu shows your sessions; Sign out everywhere ends them all, for example after losing a laptop.
Single sign-on does not work
- Check that your organisation's identity provider is active (Settings → Access & SSO → Identity providers) and that the e-mail domain is verified.
- The identity provider must allow the redirect address
https://console.sek.systems/auth/callback. - Use Run test login in the SSO wizard to see where it fails.