FlexNet Manager Suite On-Premises

Hi Champs,

I just wanted to check if anyone while upgrading from 2024 R2 to 2025 R2 has faced issues like below:

Preparing to run step 'Migration from 23.1 to 23.2'.

Required minimum database compatibility level: SQL Server 2008 (100)

Found database compatibility level: SQL Server 2019 (150)

Required version: 23.1

Found version: 23.1

Executing step

Checking that all database objects are owned by dbo...Validated

Running 'common-mig-procs.sql'.

Running 'dw-migr2320-migprep.sql'.

Starting migration in phase "prep" at step 1

Migration phase "prep" complete.

Running 'dw-migr2320-DataWarehouseSchema.sql'.

Changed database context to 'master'.

Changed database context to 'DEV_FNMPDataWarehouse'.

The module 'PopulateInitialDataForTenant' depends on the missing object 'PopulateInitialDataForDM_MT'. The module will still be created; however, it cannot run successfully until the object exists.

The module 'PopulateInitialDataForTenant' depends on the missing object 'PopulateInitialDataForFNMP_MT'. The module will still be created; however, it cannot run successfully until the object exists.

Creating procedure to return the contents of the license file associated with a particular tenant

Creating procedure to set the contents of the license file associated with a particular internal tenant ID

Creating procedure to set the contents of the license file associated with a particular internal tenant UID

Changed database context to 'DEV_FNMPDataWarehouse'.

Changed database context to 'DEV_FNMPDataWarehouse'.

Changed database context to 'DEV_FNMPDataWarehouse'.

Changed database context to 'DEV_FNMPDataWarehouse'.

Changed database context to 'DEV_FNMPDataWarehouse'.

Changed database context to 'DEV_FNMPDataWarehouse'.

Checking identity information: current identity value '1000'.

DBCC execution completed. If DBCC printed error messages, contact your system administrator.

Checking identity information: current identity value '1000'.

DBCC execution completed. If DBCC printed error messages, contact your system administrator.

Checking identity information: current identity value '1000'.

If I proceed with upgrade, will it cause any issue. Similar logs are being shows IM and DWH.

Thanks,

FL

Please provide technical guidance on the following:

FME & ZTNA Compatibility: What are the official recommendations for running FME Desktop and FME Server/Flow within a ZTNA/ZPA environment?

FlexNet Configuration: How should we configure the FlexNet license server (specifically the lmgrd and safe vendor daemons) to allow successful communication through a zero-trust broker?Port and FQDN

Requirements: What specific static TCP ports and fully qualified domain names (FQDNs) must be opened or bypassed to ensure stable licensing traffic?

Reference Architecture: Does Safe Software have documentation or case studies for deploying FME using Zscaler Private Access?We would appreciate your technical insights or the opportunity to schedule a brief call with an escalation engineer.

Hi FNMS Champs,

I am facing an issue with FNMS office365 connector, it is configured on beacon and test shows successful, but when I execute the import I get TLS:

Inventory gathering failed. Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

Logs state below:

2026-06-10 14:02:14,873 [ERROR]    Microsoft.PowerShell.Commands.WriteErrorException: Error occurred trying to get the access token: Get-TokenSetInternal failed

2026-06-10 14:02:15,904 [INFO ]    Failed to execute Reader 'Get Users from Office 365' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Reader\microsoft 365\User.xml, at step line 1

Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

2026-06-10 14:02:15,904 [INFO ]    All retries have been attempted for Reader 'Get Users from Office 365'

2026-06-10 14:02:15,904 [INFO ]    Completed with error in 1 second.

2026-06-10 14:02:15,904 [ERROR]   System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

  at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

  at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

Can someone guide on this. There is a zscaler in between and as per team they have white listed login and graph urls.

Thanks!!

Observed with 11.19.6.0 on Linux 32bit:

If <Vendor>_LICENSE_FILE contains only one file reference that points to a non-existent file or a file that does not contain a (still valid) licence,

then our <Vendor> executable takes a long time (2 Minutes) before detecting that there is no license.

This is apparently caused by lm_new_job() [called by <Vendor> executable several time for different features].

When I call the corresponding Linux executable with `strace`, the lm_new_job() causes 5-second network timeouts [several times]:

```

[16:20:38] gettimeofday({1780410038, 567563}, NULL) = 0

[16:20:38] poll([{fd=4, events=POLLOUT}], 1, 0)  = 1 ([{fd=4, revents=POLLOUT}])

[16:20:38] send(4, "234211001000000ra350xwb-2-cn44asts6"..., 47, MSG_NOSIGNAL) = 47

[16:20:43] poll([{fd=4, events=POLLIN}], 1, 5000) = 0 (Timeout)

```

In order to reproduce this, you would need a laboratory environment where DNS resolutions may fail, as is the case here.

I took care to remove any ~/flexlmrc, so there is not "hidden" server reference

that needs to be considered.

With FlexLM 11.18.0.0 this could not be observed (lm_new_job() retuns fast),

so it has probably to do with a change in the FlexLM business logic.

I consider this a FlexLM bug:

If only *files* are listed in <Vendor>_LICENSE_FILE (and ~/flexlmrc), then

lm_new_job() should not attempt any network access.

(I did not find any link to file bug reports any more, so I created this posting instead.)