Skip to main content
The Online Responder service runs as the Network Service account, so the FXCL CNG provider’s log file must be placed in a directory that account can write to.
The log file must be stored in a location accessible by the Network Service account, which is the account used by the Online Responder service. Using a path under C:\Users\ will cause log writes to fail silently when the Online Responder calls CryptoHub.
1
Create the log directory and grant Network Service write access:
PowerShell
New-Item -Path "C:\ProgramData\Futurex" -ItemType Directory -Force
icacls "C:\ProgramData\Futurex" /grant "NETWORK SERVICE:(OI)(CI)F"
Verify the permissions were applied correctly:
PowerShell
$acl = Get-Acl "C:\ProgramData\Futurex"
$acl.Access | Format-Table IdentityReference, FileSystemRights, AccessControlType
Confirm that NT AUTHORITY\NETWORK SERVICE appears with FullControl in the output.
2
In config.json, set the log file path to the new directory:
cryptohub.json
"log_file": "C:\\ProgramData\\Futurex\\fxcl.log",
For development testing, set the log_level to traffic and enable_debug_view to true. Once in production, set the log_level to info and enable_debug_view to false.