Loading
Skip Feed
  1. Microsoft Office 365 is showing TLS validation error in Task log but test is successful

    Hi FNMS Champs,

     

    I am facing an issue with FNMS office365 connector, it is configured on beacon and test shows successful, but when I execute the import I get TLS:

    Inventory gathering failed. Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

     

    Logs state below:

    2026-06-10 14:02:14,873 [ERROR]    Microsoft.PowerShell.Commands.WriteErrorException: Error occurred trying to get the access token: Get-TokenSetInternal failed

    2026-06-10 14:02:15,904 [INFO ]    Failed to execute Reader 'Get Users from Office 365' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Reader\microsoft 365\User.xml, at step line 1

    Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

    2026-06-10 14:02:15,904 [INFO ]    All retries have been attempted for Reader 'Get Users from Office 365'

    2026-06-10 14:02:15,904 [INFO ]    Completed with error in 1 second.

    2026-06-10 14:02:15,904 [ERROR]   System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

      at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

      at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

      at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

     

    Can someone guide on this. There is a zscaler in between and as per team they have white listed login and graph urls.

     

    Thanks!!

    Expand Post

    • JohnSorensenDK (Flexera Software)

      @fawad_laiq​ 

      These symptoms look like a certificate issue to me. Did you recently refresh the tokens?

       

      A workaround that you may want to test would be to configure the CheckCertificateRevocation registry key value on the beacon server to see if this would have an impact:

      Please inform the forum members of its resolution if you think they would benefit from it.

       

      Thanks,

      John Sorensen

      Expand Post

  2. 📢Question Roundup for this week[12th June]: Integration challenges & inventory visibility 

    Hello Everyone,

    It’s been a busy one in the forums, thank you again to everyone who joined our Microsoft 365 Community discussion on we hope you got some valuable insights.

    We also have a number of questions that could benefit from peer responses, if you’ve come across any of the below before please take a second to reply.

    Open questions

    [Flexera One]

    [FlexNet Manager Suite On-Premises]

    [App Broker]

    [Snow License Manager]

    [Snow inventory]

    Thanks so much in advance for taking a look, every reply makes a difference and helps keep the community moving forward 🙏

    Mercedes

     

    Expand Post

  3. Managing Java reporting excess data from ARL update

     

    Prior to November 2025, reporting for commercial installations of Java, using the Application Transparency Report (as recommended by Flexera), had been working well.

    This is described in this best practices video: https://youtu.be/jMD_AijaBXw?si=pwQ3sMOJ3xt0Esoh&t=1872.

     

    The ARL/SKU/PURL update of November 16, 2025 added a precedence rule that effectively inserts installer evidence into the Java platform application that previously were only using file evidence. Announcement here: https://community.flexera.com/s/feed/0D5PL00000glvjd0AA

     

    Since this change, the number of rows returned when reporting on Java using the Application Transparency Report has basically doubled. Typically, for every installation of Java detected using file evidence, there is now a second line that is derived from the installer evidence via the suite recognition.

     

    To eliminate this extra data from the Java reports you can run the report as you previously did, however once the report is displayed, add a filter to the Suite member application column and set the filter to Is blank. The report will now perform as it did, prior to the November 2025 change.

     

    Note that Java recognition is based on file evidence, as this is the only reliable way to retrieve the accurate application build information needed to correctly identify the version of installed Java; and therefore to determine if the installation is commercial (requiring a license).

     

    Expand Post

    May 2023: Keep Java under Control with Flexera ITAM!

    SAM is a discipline with great benefits but also great challenges. If you’re a SAM manager, in charge of SAM implementation in your organization and using Flexera tools, or if you’re a Flexera partner, watch this knowledge-sharing session.

    • 00:00 Kick Off & Agenda
    • 01:29 Pointers for the last session ("SAM Operations Hub") material and answers to questions
    • 02:23 News
    • 05:00 Managing Java / Agenda
    • 06:09 Context: The challenges of Java.
    • 10:33 How Flexera Helps you (Overview)
    • 14:48 Flexera is Java verified
    • 17:22 Flexera specific Normalization for Java and recent changes of ARL 2740
    • 24:52 Useful advices: use a recent version of the agent with file evidence, don't update Java when asked!
    • 30:59 Managing Embedded Java Instances (Exemption by file path) - Demo
    • 39:34 Java transparency with the New Oracle Java Worksheet
    • 46:24 Step by step process for creating Java licenses
    • 50:00 Demo
    • 54:45 Wrap up

    https://youtu.be/jMD_AijaBXw?si=pwQ3sMOJ3xt0Esoh&t=1872


    LicenseJakob, ChrisG, and 2 others like this.

  4. I Am getting reconciliation time out issue.
    Error message:
    Failed to import inventory devices with error message 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'

    Error message verified in Forum and updated the timeout value in registry to 57600 but still i am getting the timeout error message.

     

    Please help me:

     

    Error message:

    Failed to import inventory devices with error message 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'

    Expand Post

    1 of 4

  5. Where is the Log For "Software SKU And License Definition Updates"?

    Hi all ...

     

    Where is the log for the new "Software SKU And License Definition Updates" process? I can't find it in the C:\ProgramData\Flexera Software\Compliance\Logging folder.

     

    --Mark

    Question with a best answer.

    Best Answer

    When the Software SKU And License Definition Updates task is queued to be run, logging like the following is generated in C:\ProgramData\Flexera Software\Compliance\Logging\BatchProcessScheduler\BatchProcessScheduler.log:

     

    2025-08-18 12:02:34,307 [.LimitedProcessTracker] [INFO ] Limit 'SoftwareSKUDecryption' on DB Server 'Default' incremented. 1/5 in use per server. 1/5 in use globally.

    2025-08-18 12:02:34,307 [endingMessageProcessor] [INFO ] Message SoftwareSKUAndLicenseDefinitionDecryption[53047c4a-01b7-4185-807e-5aa3e0707002 Group: (default)] sent for processing

    2025-08-18 12:02:34,307 [ng.TaskStatusProcessor] [INFO ] Status[ed5e923a-8e21-4f9d-ae50-8d99f89e3d52]: Task[53047c4a-01b7-4185-807e-5aa3e0707002]: received status update for task 'Processing' from processor WIN-3JBQ9LR0B67

    2025-08-18 12:02:39,013 [ng.TaskStatusProcessor] [INFO ] Status[fcaac1cb-7e2e-4f29-90c5-fd324ac3781b]: Task[53047c4a-01b7-4185-807e-5aa3e0707002]: received status update for task 'Success' from processor WIN-3JBQ9LR0B67

    2025-08-18 12:02:39,029 [.LimitedProcessTracker] [INFO ] Limit 'SoftwareSKUDecryption' on DB Server 'Default' decremented. 0/5 in use per server. 0/5 in use globally.

     

     

    And logging like the following is generated in C:\ProgramData\Flexera Software\Compliance\Logging\BatchProcessScheduler\BatchProcessor.log when the task actually runs:

     

    2025-08-18 12:02:34,307 [ocessor.BatchProcessor] [INFO ] SoftwareSKUAndLicenseDefinitionDecryption[53047c4a-01b7-4185-807e-5aa3e0707002 Group: (default)] Executing task with process task type 'ProcessSoftwareSKUAndLicenseDefinitionDecryptionTask'

    2025-08-18 12:02:34,386 [nseDefinitionDecrypter] [INFO ] SoftwareSKUAndLicenseDefinitionDecryption[53047c4a-01b7-4185-807e-5aa3e0707002 Group: (default)] About to call SoftwareSKU decryption method

    2025-08-18 12:02:37,982 [nseDefinitionDecrypter] [INFO ] SoftwareSKUAndLicenseDefinitionDecryption[53047c4a-01b7-4185-807e-5aa3e0707002 Group: (default)] About to call SoftwareLicenseDefinition decryption method

    2025-08-18 12:02:39,013 [finitionDecryptionTask] [INFO ] SoftwareSKUAndLicenseDefinitionDecryption[53047c4a-01b7-4185-807e-5aa3e0707002 Group: (default)] Completed the decryption of SoftwareSKU and Software License Definition with Exit code : 0

     

    Any errors associated with the process will typically appear in the BatchProcessor.log file.

     

    No separate logging is generated by this task.

    Expand Post
    ChrisG by ChrisG (Flexera Software)

    1 of 7
    • @ChrisG (Flexera Software)​ how often does this Software SKU And License Definition Updates run? A customer recently upgraded to 2025 R2, the task has only run once and we are already being asked about it.

  6. lm_new_job() does (slow) DNS-Resolution, though <Vendor>_LICENSE_FILE contains only file reference - why?

    Observed with 11.19.6.0 on Linux 32bit:

    If <Vendor>_LICENSE_FILE contains only one file reference that points to a non-existent file or a file that does not contain a (still valid) licence,

    then our <Vendor> executable takes a long time (2 Minutes) before detecting that there is no license.

     

    This is apparently caused by lm_new_job() [called by <Vendor> executable several time for different features].

    When I call the corresponding Linux executable with `strace`, the lm_new_job() causes 5-second network timeouts [several times]:

     

    ```

    [16:20:38] gettimeofday({1780410038, 567563}, NULL) = 0

    [16:20:38] poll([{fd=4, events=POLLOUT}], 1, 0)  = 1 ([{fd=4, revents=POLLOUT}])

    [16:20:38] send(4, "234211001000000ra350xwb-2-cn44asts6"..., 47, MSG_NOSIGNAL) = 47

    [16:20:43] poll([{fd=4, events=POLLIN}], 1, 5000) = 0 (Timeout)

    ```

    In order to reproduce this, you would need a laboratory environment where DNS resolutions may fail, as is the case here.

     

    I took care to remove any ~/flexlmrc, so there is not "hidden" server reference

    that needs to be considered.

     

    With FlexLM 11.18.0.0 this could not be observed (lm_new_job() retuns fast),

    so it has probably to do with a change in the FlexLM business logic.

     

    I consider this a FlexLM bug:

    If only *files* are listed in <Vendor>_LICENSE_FILE (and ~/flexlmrc), then

    lm_new_job() should not attempt any network access.

     

    (I did not find any link to file bug reports any more, so I created this posting instead.)

     

     

    Expand Post

    1 of 2
    • Thanks Chris, for pointing this out.

      I guess I got confused by the (new-to-me) organization of the forums -

      Now I went to the correct forum and created Case Number 05038617 there.

      So this thread here should probably be closed.

    • JohnSorensenDK (Flexera Software)

      @PagetSR​ 

      I can see that you got this issue resolved through a support case. Please inform the forum members about its resolution if you think others would benefit from it.

       

      Thanks,

      John Sorensen

      Expand Post

  7. 📢Question Roundup for this week[29th May]: 

    Data accuracy and system compatibility

    Hello Everyone,

    Hope you have had a good week! There were quite a few product updates in the Flexera One blog this week, check them out here Group: Flexera One Blog. You can also join the blog to be added to the mailing list for new updates.

    Here are open posts from this week that still need an answer, check them out below:

    Open questions

    [Flexera One]

     

    [FlexNet Manager Suite On-Premises]

     

    Many thanks,

    Mercedes

     

     

    Expand Post

End of Feed
8 Chatter Feed Items
ALL CONVERSATIONS
UNSOLVED
Unanswered Questions
Skip Feed
  1. Our security scanner (Prisma Compute) detected that the FNMS Docker Monitor component:
    C:\Program Files (x86)\ManageSoft\Container\fnms-docker-monitor.exe

    is built with Go crypto/tls version 1.25.3, which is vulnerable to CVE‑2025‑68121.

    Subject: Request updated FNMS Docker Monitor binary built with Go 1.25.7+ (CVE‑2025‑68121)

    Hello Team,

    Our security scanner (Prisma Compute) detected that the FNMS Docker Monitor component:

    C:\Program Files (x86)\ManageSoft\Container\fnms-docker-monitor.exe

    is built with Go

    crypto/tls

    version 1.25.3, which is vulnerable to CVE‑2025‑68121.

    According to the Go project, the vulnerability is fixed only in:

    • Go 1.24.13
    • Go 1.25.7
    • Go 1.26.0‑rc.3

    Can you please provide the latest FNMS Container Monitor / Inventory Agent installer or updated

    fnms-docker-monitor.exe

    built with Go 1.25.7 or later, so we can apply the remediation?

    Expand Post

  2. Copy use rights from one license to another? Is it possible?

    Hi everyone.

    Is there a way to copy use rights from one license to another?

    We have a license with tons of upgrade and downgrade rights like this one:

    imageWe need to create another license with the same rights and then add some additional restrictions.

    Any idea how to avoid doing it manually? Perhaps duplicate the original license and then change it's name and other properties?

    Some SQL query?

     

    Thanks in advance,

    Pawel

    Expand Post

    efenick likes this.
  3. Prevent docker monitoring service from installing using command line

    Hi, how is it possible to disable docker monitoring from installing by default?

    I tried in setup.ini:

    CmdLine=/l*v "%TEMP%\FlexNet Inventory Agent.msi.log" REMOVE=docker

    But that only made ALL custom installation options as disabled in GUI installation.

    Also is there a complete reference somewhere for setup.ini where we would see all potential command line options?

     

     

    Expand Post

    anttimustonen likes this.
  4. High CPU Usage on AIX Devices

    I was just hoping to find so more solid information regarding this. I was able to find this information:

     

    IOJ-1927932 Agent, Inventory:

    Invalid inventory directory exclusions using wildcards may cause high CPU usage and ndtrack process seg faults on UNIX-like operating systems

    Please don't specify wildcard within the path set to configure include or exclude directory paths e.g. */oracle/*backup/

     

    From this article - https://docs.flexera.com/FlexNetManagerSuite2020R2/EN/Status/Issues/UnresolvedIssues.htm

     

    But I was hoping to be able to go back to my team with some more solid information.

     

    We currently have 3 AIX machines that are currently AIX 7.2.5.208 TL05. The team has had ongoing issues with these machines for the past few years and high CPU usage. But we haven't had any other teams reporting the same sort of issues with AIX machines.

     

    They have increased all different specs to do with the machines but still face the same issues. With even more CPU/virtual hardware that gets added the more resource's ndtrack just ends up using.

     

    Is there any solid explanation I can give the team besides " using wildcards may cause high CPU usage and ndtrack process seg faults on UNIX-like operating systems"

     

    Expand Post

    weskus likes this.
  5. Reconciliation stuck in progress after FNMS upgrade to 2024 R1

    Hello Flexera Community,

     

    Is the below reconciliation gap is known issue? If yes - is there any workaorund to fix this

     

    Import step "Write WMIEvidence: Populate the ManageSoft rules to imported evidence mapping and WMIEvidence table" runnig for longer then usual.

     

    Recon logs before upgrade -

     

    2025-01-31 22:14:34,703 [INFO ]    Writer step 'Write WMIEvidence: Populate the ManageSoft rules to imported evidence mapping and WMIEvidence table' with non-default execution path (Fallback) meets condition TestingOrFallback.

    2025-01-31 22:49:39,778 [INFO ]    Matched 3247698 records to existing WMI Evidence without wildcards

    2025-01-31 22:49:39,778 [INFO ]    Matched 386 records to existing WMI Evidence with wildcards

    2025-01-31 22:49:39,778 [INFO ]    Added 36516 new WMI Evidence records from the source database connections.

    2025-01-31 22:49:39,778 [INFO ]    Matched 36516 records to WMI Evidence that was just added

    2025-01-31 22:49:39,778 [INFO ]    Successfully processed in 35 minutes, 5 seconds

     

    Recon logs after upgrade -

     

    2025-02-08 21:36:00,969 [INFO ]    Writer step 'Write WMIEvidence: Populate the ManageSoft rules to imported evidence mapping and WMIEvidence table' with non-default execution path (Fallback) meets condition TestingOrFallback.

    2025-02-09 21:53:03,359 [INFO ]    Matched 3261896 records to existing WMI Evidence without wildcards

    2025-02-09 21:53:03,359 [INFO ]    Matched 384 records to existing WMI Evidence with wildcards

    2025-02-09 21:53:03,359 [INFO ]    Added 12244 new WMI Evidence records from the source database connections.

    2025-02-09 21:53:03,359 [INFO ]    Matched 12244 records to WMI Evidence that was just added

    2025-02-09 21:53:03,359 [INFO ]    Successfully processed in 1 day, 0 hours, 17 minutes, 1 second

     

    what exactly is changed which is taking longer then usual (more then 24 hours) to complete this writer step.

     

    Thanks,

    Awadh

     

     

    Expand Post

  6. We upgraded to 2024 R2 Last night. all of our beacon servers and our inventory server IIS log has grown in size exponentially.

     inventory server avg iis log size daily is roughly 22k KB. now its at 150k KB half way through the day.  we are getting 3 lines per upload of any type of file.

    First one has Head Classification where it used to be Options. its errors with 401

    Second one has Head Classification with Service account and it errors with 403

    third is a PUT with Service account with 200 success.


  7. Hi,
    On my Management Dashboard, under the Publishers in Breach tile (bottom left) I have two tiles that are set up to show Scheduled Costs. I cant get these to display data from test cases.

    I can get the line items to show up in the Scheduled Subscription tile on the RHS of the 2 cost tiles , but I cant get any $ cost amounts , thanks


End of Feed
8 Chatter Feed Items
Loading
FlexNet Manager | Flexera Community