Re: flexeracodesigning cert expired

SinghJ · ‎Oct 11, 2024

Hi All,

We are installing our Flexera product on new servers and planning to decommision our old servers. When we are trying to do the same. In that process we have to install Flexeracodesigning cert (which we download from flexera downloads) on SQL DB (master level). When we isntall the same this time. We got the message that cert is expired.

So, my question is :-

1. Will this cert work as this beloing to version which we are reinstalling.

2. Can we use the latest cert (2024 R2) .

3. Will thing work without Cert.

What to do, as client is not ready for upgrade now till the time we moved to new servers.

SNeddermeyer · ‎Oct 11, 2024

Hi,
you can use the certificate from the latest release 2024R1, or you can disable 'TRUSTWORTHY' feature on your DB. Both are required for running FNMS on SQL Server 2017 or newer.

Best regards.
Steve

| sleep, code, eat, repeat |

ChrisG · ‎Oct 13, 2024

You should use the version of the certificate that is published with the particular FlexNet Manager Suite release you are using. You should use a certificate from a different release as it may not be relevant for your release.

This certificate needs to be valid at the time it was originally used to sign files included in the release (which is was for all existing FlexNet Manager Suite releases). The certificate does not need to be valid at the time you install/use the certificate or use files that were signed with it.

(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)

SinghJ · ‎Oct 18, 2024

Thanks for the reply.. Chris our flexera servers are very old so we have to decommission them. However when we try to install the certificate on new server's we get the following error. We are not upgrading only moving to other servers as we dont have any option. We already restored the database from old to new.

1. Do we need install the cert again.

2. We tried the old cert but we are getting the error.

Msg 15208, Level 16, State 19, Line 3
The certificate, asymmetric key, or private key file is not valid or does not exist; or you do not have permissions for it.
Msg 33140, Level 16, State 1, Line 7
The login 'FlexeraLogin' could not be created because a login is already associated with certificate 'Flexera'.
Msg 15023, Level 16, State 5, Line 13
User, group, or role 'FlexeraUser' already exists in the current database.

ChrisG · ‎Oct 20, 2024

You need to ensure the certificate from the version of FlexNet Manager Suite you are using is configured on the SQL Server instance.

I assume the first error is being reported when you try to execute a "CREATE CERTIFICATE" statement. The most obvious cause of that error is that the certificate file path referred to by the statement does not exist on the computer that SQL Server is running on.

The 2nd and 3rd errors suggest that the "FlexeraLogin" login and "FlexeraUser" user already exist. You may want to manually delete this login and user before re-creating them (if you need to re-create them at all).

I don't expect any of these errors will have anything to do with certificate expiry date (which is the focus of this forum discussion thread).

(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)

SinghJ · ‎Oct 22, 2024

Thank you for your reply. one more question.

When the first time we download the certificate from flexera portal and ran it. It was created successfully but we got the message: cert already expired but cert. was created.

Now we are not sure we can install flexera on new servers or not with that cert.

Note : Our old servers need to decommission ... we have to install flexera to new servers.