FlexNet Manager Suite On-Premises

Please provide technical guidance on the following:

FME & ZTNA Compatibility: What are the official recommendations for running FME Desktop and FME Server/Flow within a ZTNA/ZPA environment?

FlexNet Configuration: How should we configure the FlexNet license server (specifically the lmgrd and safe vendor daemons) to allow successful communication through a zero-trust broker?Port and FQDN

Requirements: What specific static TCP ports and fully qualified domain names (FQDNs) must be opened or bypassed to ensure stable licensing traffic?

Reference Architecture: Does Safe Software have documentation or case studies for deploying FME using Zscaler Private Access?We would appreciate your technical insights or the opportunity to schedule a brief call with an escalation engineer.

Hi FNMS Champs,

I am facing an issue with FNMS office365 connector, it is configured on beacon and test shows successful, but when I execute the import I get TLS:

Inventory gathering failed. Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

Logs state below:

2026-06-10 14:02:14,873 [ERROR]    Microsoft.PowerShell.Commands.WriteErrorException: Error occurred trying to get the access token: Get-TokenSetInternal failed

2026-06-10 14:02:15,904 [INFO ]    Failed to execute Reader 'Get Users from Office 365' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Reader\microsoft 365\User.xml, at step line 1

Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

2026-06-10 14:02:15,904 [INFO ]    All retries have been attempted for Reader 'Get Users from Office 365'

2026-06-10 14:02:15,904 [INFO ]    Completed with error in 1 second.

2026-06-10 14:02:15,904 [ERROR]   System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

  at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

  at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

Can someone guide on this. There is a zscaler in between and as per team they have white listed login and graph urls.

Thanks!!

Observed with 11.19.6.0 on Linux 32bit:

If <Vendor>_LICENSE_FILE contains only one file reference that points to a non-existent file or a file that does not contain a (still valid) licence,

then our <Vendor> executable takes a long time (2 Minutes) before detecting that there is no license.

This is apparently caused by lm_new_job() [called by <Vendor> executable several time for different features].

When I call the corresponding Linux executable with `strace`, the lm_new_job() causes 5-second network timeouts [several times]:

```

[16:20:38] gettimeofday({1780410038, 567563}, NULL) = 0

[16:20:38] poll([{fd=4, events=POLLOUT}], 1, 0)  = 1 ([{fd=4, revents=POLLOUT}])

[16:20:38] send(4, "234211001000000ra350xwb-2-cn44asts6"..., 47, MSG_NOSIGNAL) = 47

[16:20:43] poll([{fd=4, events=POLLIN}], 1, 5000) = 0 (Timeout)

```

In order to reproduce this, you would need a laboratory environment where DNS resolutions may fail, as is the case here.

I took care to remove any ~/flexlmrc, so there is not "hidden" server reference

that needs to be considered.

With FlexLM 11.18.0.0 this could not be observed (lm_new_job() retuns fast),

so it has probably to do with a change in the FlexLM business logic.

I consider this a FlexLM bug:

If only *files* are listed in <Vendor>_LICENSE_FILE (and ~/flexlmrc), then

lm_new_job() should not attempt any network access.

(I did not find any link to file bug reports any more, so I created this posting instead.)

Error message verified in Forum and updated the timeout value in registry to 57600 but still i am getting the timeout error message.

Please help me:

Error message:

Failed to import inventory devices with error message 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'