Diagnostics for the issues admins actually hit, in the order they usually hit them.
Pass URLs not generating
Check the debug logs for the NAMED_CREDENTIAL_RESPONSE status:
- Status 401 (Unauthorized) — the named credential password is wrong or the integration user was reset. Fix: Setup → Named Credentials → Kemicard_App → re-enter username/password.
- Status 409 (Conflict) — provisioning mismatch. Verify the Org ID matches what was provisioned; contact support to re-align licensing.
- Also confirm the org allows outbound email and the Configuration's email settings are set.
Org ID changed (sandbox refresh / migration)
A sandbox refresh or org migration changes the Org ID, so backend provisioning no longer matches and the integration user can show as disabled or .invalid. Fix: re-provision with the new Org ID and reauthorize the app.
Pass installs on Google but not Apple
If the org was re-provisioned or reauthorized, the integration may have picked up a default certificate instead of your client certificate. Symptom: Google Wallet works, Apple install fails. Fix: support re-aligns provisioning to your certificate; then test both platforms on device.
Cards moved to “expired” unexpectedly
- Apple relevant-date archive behavior — event passes older than a year with no relevant date may auto-archive. Push any update to restore the card; set relevant dates going forward.
- Wrong expiry data — trace the upstream pipeline (forms, batch imports, manual entry) before suspecting the package.
Google pass fields not rendering
Usually related to image module placement when secure images are enabled, or an outdated package version. Fix: upgrade to the latest package (v2.28 contained Google rendering fixes), then compare before/after payloads and escalate to support if fields still differ.
Enrollment emails not arriving
- Sandbox/scratch orgs with unverified domains won't send — enable the substitute-address option in Email Deliverability or provision DKIM for the sandbox.
- Trial emails are sometimes quarantined by client mail filters — check quarantine, then resend from an alternate domain.
- Verify an email template is set on the Configuration (required for Bulk Actions too).
Bulk Actions failing
- Immediate error — missing email template on Configuration. Set it, test with a one-record report, retry.
- “Too many SOQL queries” — legacy Process Builders firing on the same objects. Rebuild that logic into the Flow and deactivate the PB.
Scanner won't read a barcode
Check the format: QR and PDF417 are reliable; Code-128 is not reliably recognized. Regenerate the template with QR if needed.
Member shared their pass / duplicate installs
- Disable sharing at the template level (verify on Android that share is blocked from both front and back of the card).
- On Google Wallet, device restriction auto-invalidates duplicate installs (v2.29).
- Interim patterns: disable the distribution link after install, or switch duplicated cards to a “duplicated card detected” error-state template.
Still stuck?
Email support@kemisoft.com with the org ID, pass record ID, debug log excerpt, and screenshots. Enterprise tiers include priority investigation; deeper implementation work is scoped as a services engagement.
Geofence notification not appearing
- Confirm the template has 10 or fewer locations and coordinates are valid (re-geocode the address if it was entered before a move).
- Lock-screen surfacing requires the pass to be installed and the phone's location services enabled for Wallet.
- Known OS-level geofencing regressions exist on some iOS versions — validate on a second device before raising a ticket. Google Wallet does not yet show lock-screen location messages.
Push notification not showing
- Apple suppresses a push whose text is identical to the previous one — change the message text.
- If Apple Wallet was open on the device, the message renders on the back of the card instead of as a banner.
- Confirm the pass is still installed (check the install status on the pass record) — removed passes receive nothing.
- Notifications require the device to be online; queued messages deliver on reconnect.
"Template limit reached" when creating a template
Template count per org is a licensing control. Delete unused draft templates, or contact your account manager to raise the limit on your plan.
Builder preview shows "(empty)" values
The live preview is driven by a sample record. Pick a sample record that has every mapped field populated, or set fallback values in the template's formatting rules.