Bluewhale ApS
Fruebjergvej 3, boks 1
DK-2100 Copenhagen Ø

Phone: +45 39 17 99 73
CVR: DK29824479
E-mail:
 
   

Bluewhale for Outlook Support

Deploying Bluewhale for Outlook
Troubleshooting

When the Bluewhale for Outlook add-in is installed, large attachments are automatically intercepted and uploaded to the Bluewhale Server.
The attachments are replaced by download links, allowing the recipient to download the files while keeping the e-mail itself small.

The user can attach entire folders and files larger than the limit imposed by Exchange by using the buttons on the Bluewhale toolbar.

The Bluewhale trigger size is configured globally and can be adjusted by the user.

Deployment

The Bluewhale for Outlook MSI supports various properties. When installing on a large number of computers, it is recommended to create a cmd/bat-file or transformation file with the desired settings.

If a property is set during installation the corresponding HKLM key will be created.
If a setting is user adjustable the corresponding HKCU key is noted below the HKLM key.

Property: BLUEWHALE_SERVER
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\bluewhaleServer
Example value: https://bluewhale.company.com
Description: URL to your Bluewhale Server.
 
Property: ACCEPT_ANY_CERT
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\acceptAnyCert
Default value: False
Description: If set to "TRUE" Bluewhale will accept any SSL certificate, including self-signed certificates.
This not recommended for production systems.
 
Property: SERVICE_PRINCIPAL
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\kerberosServicePrincipal
Example value: bwservice/bluewhale.company.com@COMPANY.DOMAIN
Description: Kerberos service principal. Used for single-sign-on.
 
Property: USE_SSPI
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\useSSPI
Example value: True
Description: Login using the single-sign-on feature (TRUE).

Property: ENABLE_SEND_SECURE
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\enableSendSecure
Default value: True
Description: Enables the "Send secure"-button and the extended "Send using Bluewhale"-dialog.
 
Property: ASK_BEFORE_BLUEWHALING
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\askBeforeBluewhaling
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\askBeforeBluewhaling
Default value: False
Description: Prompt the user if an e-mail has to be sent by Bluewhale.
 
Property: SAVE_PASSWORD
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\savePassword
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\savePassword
Default value: True
Description: Bluewhale for Outlook can store Bluewhale login information in an encrypted form. Only used if single-sign-on is not used.
 
Property: LOWER_LIMIT
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\lowerLimit
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\lowerLimit
Default value: 3
Description: The default Bluewhale attachment size trigger in Mb. Mails with attachments larger than this limit, will be intercepted by Bluewhale.
 
Property: ACTIVATE_ON_ITEM_SEND
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\activateOnItemSend
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\activateOnItemSend
Default value: True
Description: If this property is true Bluewhale will intercept Outlook send events and scan for Bluewhale attachments and large files.
 
Property: USE_PIN_CODE_BY_DEFAULT
Registry key: HKLM\SOFTWARE\Webholdet\Bluewhale for Outlook\usePinCodeByDefault
HKCU\SOFTWARE\Webholdet\Bluewhale for Outlook\usePinCodeByDefault
Default value: True
Description: Controls if "Send SMS PIN code" should be selected by default in Bluewhale dialog. This property is only used if activateOnItemSend is false.
 

Example Bluewhale for Outlook install cmd/bat script

msiexec.exe /i bwoutlookSetup.msi /qn
BLUEWHALE_SERVER="https://bluewhale.company.com"
SERVICE_PRINCIPAL="bwservice/bluewhale.company.com@COMPANY.DOMAIN"
USE_SSPI="True"
ASK_BEFORE_BLUEWHALING="False"
SAVE_PASSWORD="False"
LOWER_LIMIT="3"
/l* bwinstall.log

Troubleshooting

Bluewhale causes Outlook and Word to crash when the user exits

Microsoft updates KB982524/KB976576 to Microsoft.NET Framework 2.0 Service Pack 2 causes Outlook 2003 and Word 2003 to crash when Bluewhale for Outlook is installed and the user exits the programs. Please upgrade to Bluewhale for Outlook version 1.2.1 to fix this issue.

Bluewhale add-in not visible

If you have installed Bluewhale for Outlook, but the add-in is not showing inside Outlook, please check if the add-in has become disabled.

In Outlook 2007 select Tools > Trust Center. Verify that Bluewhale is not disabled.

In Outlook 2003 select Help > About Microsoft Office Outlook. Select "Disabled elements". Verify that Bluewhale is not disabled.

Unhandled error has occured

Please look for Bluewhale errors in the Event Viewer:

Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".

Description:
Unhandled error has occured
System.ApplicationException:
The 'secman.OutlookSecurityManager' COM object is not registered.
at AddinExpress.Outlook.SecurityManager.set_DisableOOMWarnings(Boolean value)
at bwoutlook.ItemSendHandler.BluewhaleDoneHandler(Object trans, SendResult sendResult)
...

The error is caused by secman.dll not being correctly registered.

Fix by running:

regsvr32 "C:\Program Files\Webholdet\Bluewhale for Outlook\secman.dll"

If you have changed the default installation path, you should replace "C:\Program Files\Webholdet\Bluewhale for Outlook" with your installation path.

Error sending message

Please look for Bluewhale errors in the Event Viewer:

Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".

Description:
Error sending message
System.InvalidCastException:
Unable to cast COM object of type 'Redemption.SafeMailItemClass'
to interface type 'Redemption.ISafeMailItem'.
This operation failed because the QueryInterface
call on the COM component for the interface with
IID '{0A95BE2D-1543-46BE-AD6D-18653034BF87}'
failed due to the following error: Library not registered.
(Exception from HRESULT: 0x8002801D (TYPE_E_LIBNOTREGISTERED)).
at Redemption.SafeMailItemClass.set_Item(Object Value)
at bwoutlook.ItemSendHandler.BluewhaleDoneHandler(Object trans, SendResult sendResult)

The error is caused by Redemption.dll not being correctly registered.

Fix by running:

regsvr32 "C:\Program Files\Webholdet\Bluewhale for Outlook\Redemption.dll"

If you have changed the default installation path, you should replace "C:\Program Files\Webholdet\Bluewhale for Outlook" with your installation path.

Single sign-on errors on Windows 7

Please look for Bluewhale errors in the Event Viewer:

Go to Control panel > Adminstrative Tools > Event Viewer. Select "Application".

Description:
Login error. Please check your domain login.
SPN: bluewhale/bluewhale.company.com@COMPANY.LOCAL

Microsoft.Samples.Security.SSPI.SSPIException:
InitializeSecurityContext failed.. Error Code = '80090342'.
at Microsoft.Samples.Security.SSPI.ClientContext..ctor
(ClientCredential credential, String serverPrincipal,
ContextAttributeFlags contextAttributeFlags)
at bwbackend.KerberosManager.DoLogin()

The error is caused by the Kerberos encryption types being undefined (SEC_E_KDC_UNKNOWN_ETYPE / 0x80090342).

The error can be fixed by opening:

Control Panel > Adminstrative Tools > Local Security Policy

Select "Local Policies" > "Network security: Configure encryption types allowed for Kerberos".

Make sure "DES-CBC-MD5" is checked. For best compatibility with other software your should enable all encryption types. Click OK.