Summary This Knowledge Base Article will describe in details on how to use the new executable BatchProcessTask.exe / BatchProcessTaskConsole.exe in command prompt to run different tasks in Flexnet Manager Platform On Premise v2015 + . Synopsis In Flexnet Manager Platform version 2015+ , we introduced a new command line (two executable files BatchProcessTask.exe & BatchProcessTaskConsole.exe). User can run individual Batch process in the command prompt as required rather than run the batch process from Product UI and Product Beacon UI. Discussion BatchProcessTaskConsole is almost exactly the same as BatchProcessTask. The 'Console' version will print out to the console, the other won't. We use the non-console version in scheduled tasks so the server doesn't pop up a console window when they execute. To determine the command line arguments, execute 'BatchProcessTaskConsole run' from a command line. This will show that you can do: BatchProcessTask[Console] run TASK [OPTIONS] [--TASK OPTIONAL ARGUMENTS] Example: We can run a particular Inventory Source connection Reader process: BatchProcessTask[Console] run InventoryImportReaders ---s 'FlexNet Manager Suite' BatchProcessTask[Console] run InventoryImportReaders ---s SCCM Note that the three dashes aren't a typo. The first two signal that everything following is to be passed through as arguments to ComplianceReader, the third is passed through. You can put a space between the -- and the -s if you like, it will work. If you do this from PowerShell though, you have to quote the double-dash: '--' Another useful use of -- BatchProcessTaslConsole.exe list-tasks , The list-Tasks parameter will tell you what's the current process is being processed. Workaround For workaround, you can use attached SQL script to run on the database, it will show you the history of BatchProcess of your system. Additional Information In version 2015, we have below batch process can be called individually ----------------------------------------------- ----------------------------------------------- ActiveDirectoryImport ARLCleanup ARLDownload ARLImport BusinessAdapterConfig BusinessAdapterImport DataWarehouseUpdate DataWarehouseUpdateRights EnterpriseGroupImport EntitlementRecommendations FNMEAEnterpriseGroupExport IBMPassportAdvantage IBMPVULicenseUpdate IMDataMaintenance IMImport InventoryImport InventoryImportNoStats InventoryImportReaders InventoryImportWriters LicenseReconcile POLineImport SAPInventoryImport SAPPackageLicenseImport SAPTransactionProfileImport SAPUserAndActivityImport SAPUserConsumptionImport SAPUserImport SAPUserRecommendationExport SAPUserRoleImport ServiceNowExport UserAssignmentImport ... View more

Summary Instructions for accessing the EULA for FNMS. Synopsis How do I access the End User License Agreement (EULA) from within FlexNet Manager Suite? Discussion The EULA is first presented whenever a new operator logs into FNMS and must be accepted before the Suite can be used. Workaround However, if the EULA has been accepted, it can be re-accessed by appending /EULA onto the end of the /Suite in the address bar. For example: https://FNMS.MyDomain.Lan/Suite/EULA ... View more

Summary This article will describe a product defect that computer inventory were successfully read from Inventory Source (IM,SCCM various source), but not able to find in FNMP All Inventory page. Symptoms There is a defect introduced in product version 2015 R1 -- R2 SP2. The issue is that inventory computers exist in the inventory source (Inventory Manager, SCCM, ADDM etc), but they do not show up in the All Inventory page from UI. Other symptoms including: 1. Devices exist in the ZIP package from inventory source import, but do not show up in the Inventory in FNMP 2. Devices listed under application properties but not all inventory 3. Inventory stuck in the database as 'Awaiting inventory' in ComplianceComputer table This article also includes a patch for on premise customer. Cause The cause was the importer incorrectly update the computer , even the Computer Status is 4 -- Awaiting Inventory, but not update the status back to 1 'New'. So user is unable to find the machine from product UI. The following steps can be used to reproduce the issue: 1. Import inventory from inventory source eg: SCCM 2. Create asset from inventory 3. Unlink inventory from asset 4. Delete inventory -- then the ?Dummy? ComplianceComputer row created 5. Re-import inventory from SCCM: ComplianceComputer updated with inventory information, but not the ComplianceComputerStatusID Resolution The permanent fix will be included in 2015 R2 SP3 release in mid of Feb 2016. Workaround For the affecting customer if you are using On-premise solution , please follow the below steps for applying the patch in the attachment: 1. Do a SQL database full backup (in case we need rollback) 2. Unzip the patch.zip from attachment 3. Run FNMS-29156.sql 4. Run FNMS-29251.sql 5. Run another inventory import, the affected inventory computer should be re-appeared in the UI ... View more

Summary This article will describe a scenario that product error will occur when Inventory Manager does Polmerge process or Oracle Discovery process, even the corresponding Oracle Drive are installed. The root cause is due to missing a system dll file ('C:\Program Files (x86)\Common Files\System\msadc\msdaprst.dll'). It may have been removed by Symantec antivirus software due to security reasons. Symptoms This article will describe a scenario that product error will occur when Inventory Manager does Polmerge process or Oracle Discovery process, even the corresponding Oracle Drive are installed. The root cause is due to missing a system dll file ('C:\Program Files (x86)\Common Files\System\msadc\msdaprst.dll'). It may have been removed by Symantec antivirus software due to security reasons. The Oracle Discovery error message: Error 0x800a0e7a "Provider cannot be found. It may not be properly installed." occurred while attempting to access "ADODB.Recordset". This msdaprst.dll is currently a required component for our Oracle Inventory Cause For security reason , this file may have been removed by antivirus software. This Symantec document refers to the PCI DSS standard and specifically CIS Security Configuration Benchmark For Microsoft IIS 7 which contains: 1.1.2 Remove or Rename Well-Known URLs (Scored) 7. Ensure nothing exists at %programfiles%\Common Files\System\msadc Reference: The Symantec Documents (https://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=HOWTO83950) PCI DSS Standard (http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard) CIS Security Configuration Benchmark For Microsoft IIS 7 (https://benchmarks.cisecurity.org/tools2/iis/CIS_Microsoft_IIS_7_Benchmark_v1.4.0.pdf) Steps To Reproduce Please use "Process Monitor" tool to reproduce this with oratrack.exe to connect to a single database instance. This will show all of the class registry keys accessed. You will see Result ' PATH_NOT_FOUND' on Process Name "oratrack.exe" , Operation (CreateFile) Resolution Workaround Add file (msdaprst.dll) back C:\Program Files (x86)\Common Files\System\msadc\ ... View more

Summary This article will give user the instruction regarding on how to add or modify a column in Business Adapter Studio objects , if the column is not listed by default template. This instruction is only suitable for customer using FNMP On Premise solution, it doesn't apply on Cloud solution. Synopsis This article will give user the instruction regarding on how to add or modify a column in Business Adapter Studio objects , if the column is not listed by default template. This instruction is only suitable for customer using FNMP On Premise solution, it doesn't apply on Cloud solution. In OnPremise solution, there is a file called 'FNMPDataModel.ini' located under eg:C:\Program Files\Flexera Software\FNMP Business Adapter Studio\FNMPDataModel.ini You just need to add the properties in the FNMPDataModel.ini file, and restart the BAS. The added properties should show up for any existing or new adapter definition. Discussion For instance scenario if you want to add Lease columns information for Asset (LeaseStartDate , LeaseEndDate) on business adapter studio, add the following two lines in the corresponding 1. Backup FNMPDataModel.ini when it's on default just in case it require roll back 2. You need add full control access to the folder and files to overwrite this file (by default you may hit access deny issue without full control) 3. Close the Business Adapter Suite UI 4. Open ini file, and go to correponsding DataModel for the corresponding FNMP version you currently using eg: DataModel ProductName="FlexNet Manager Platform" Version="9.2" Language = "EN"> 5. Locate Object to <Object Type = "Asset" name= "Asset" supportcustomproperties="true"> 6 Add following two lines enclosed in the multiple Property Type statement. The order will be matter depends on the location of the new statement where they are insert before/after the existing Columns. <Property Type="LeaseStartDate" Name="Lease Start Date" DataType="datetime"></Property> <Property Type="LeaseEndDate" Name="Lease End Date" DataType="datetime"></Property> 7. Save the change and close. Verify by Open Business Adapter Suite UI again. Related Documents See attached PowerPoint for more details information of Business Adapter Suite 2014. Additional Information This configuration doesn't apply for Oncloud Solution, because Cloud solution requires both server and client end DDI Xml be consistent. Only change client end configuration of Business Suite Adapter and doesn't make server end change correspondingly, the result will not work. ... View more

Summary plink.exe may crash when using SSH private keys larger than 1kb Symptoms An error occurs when attempting to run inventory on a non-windows device. Using keypair Authentication http Doing authentication against a non windows device User is root Inventory Task Error: SSH command summary: plink.exe -batch -ln "Non-Windows Account (Unix) Failure reason: - An unknown error has occurred (3221225477). Please inspect the process output to determine the cause of this error. TCP command summary: Failure reason: - A socket error occurred (No connection could be made because the target machine actively refused it). Please inspect the process output to determine the cause of the error. RPC command summary: Failure reason: - Failed to connect to the Service Manager on the remote device Windows Error: - The RPC server is unavailable. Command: - \\****\****$\Inventory\ndtrack.exe -t Machine -o UploadLocation=http://**************:80/ManageSoftRL/ -o LogModules=default -o IgnoreConnectionWindows=true -o ShowIcon=false Event log error for the process that fails: Faulting application name: plink.exe, version: 0.60.220.0, time stamp: 0x506512ca Faulting module name: plink.exe, version: 0.60.220.0, time stamp: 0x506512ca Exception code: 0xc0000005 Fault offset: 0x00039f55 Faulting process id: 0x5cb4 Faulting application start time: 0x01ce13ab0d2f4382 Faulting application path: D:\Program Files (x86)\ManageSoft\RemoteExecution\plink.exe Faulting module path: D:\Program Files (x86)\ManageSoft\RemoteExecution\plink.exe Report Id: 4af14486-7f9e-11e2-9eb4-005056a50131 Cause plink.exe is using a 1kb hard coded buffer for loading the private key stored in the inventory manager password store. If the private key is larger than 1kb, memory corruption occurs as plink crashes. Steps To Reproduce Product version is prior to v9.3 containing this problematic Plink.exe Resolution After FNMP v9.3, plink.exe is fixed to prevent crash in plink when SSH private key is > 1kb Workaround Replace your current plink.exe by the fixed version in the attachment in this KB article. We recommend you backup you old plink.exe somewhere else before replacement. ... View more

Summary This article will describe a product defect while delete a specific custom report, the deletion button may delete the entire report folder where currently at in FlexNet Manager Suite 2016 R1 version. Symptoms When deleting a custom report via the report index a typical user would navigate the folders in the left tree and then select the report they want to delete and hit the delete icon. - see below However, there is difference in behavior between: Checking the checkbox and hitting the delete icon The entire folder is going to be deleted Clicking on the row (not the checkbox) for the report on the right Just the single report is deleted Cause The product defeat is been confirmed the 'Checkbox' after user selects, it doesn't change the Deletion button from doing ''Delete Folder' to 'Delete Report'. Resolution A bug has been submitted- FNMS-36340 -- Deleting report deletes the entire folder if the checkbox of the report is checked Workaround 1. When selecting a specific report to be deleted, User need to highlight the report by clicking any fields such as 'Name' or 'Description' 2. Move your mouse cursor on top of 'Bin' icon to check whether currently the button will indicate it's going to delete folder or delete report 3. After clicking the button, the prompt out warning message is accurately describing what's the action is going to take place. Read the message carefully before click 'Ok' button. 4. Once the data is deleted , the custom report is permanently removed from a database level, therefore user has to recreate manually. ... View more

Summary This knowledge base article will describe a product defect in FlexNet Manager Suite 2017 R1 version of Active Directory import process. A patch is availabe for download. Symptoms This knowledge base article will describe a product defect in FlexNet Manager Suite 2017 R1 version of Active Directory import process. From the ADimport.log which is located under Beacon eg: C:\ProgramData\Flexera Software\Compliance\Logging\ActiveDirectoryImport The specific error message including: 2017-07-19 22:23:19,294 [oryImport.LdapSearcher] [ERROR] Failed to search DN OU=xxxxxx,OU=Users,OU=IN,DC=aaa,DC=bbbb,DC=com, filter: ( &(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)) ) System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<>c__DisplayClass11.<SendRequest>b__10() at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.Retry(Action act, String errMsgFormat, Object[] args) 2017-07-19 22:23:19,309 [irectoryImportLauncher] [ERROR] Error occurred. System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<>c__DisplayClass11.<SendRequest>b__10() at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.Retry(Action act, String errMsgFormat, Object[] args) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.SendRequest(SearchRequest req, TimeSpan timeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<Search>d__2.MoveNext() at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.ImportUsers(OrganizationalUnit p_OrganizationalUnit, IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.ImportOrganizationalUnits(String p_DefaultNamingContext, IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.Execute(IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.ActiveDirectoryImportLauncher.Execute() 2017-07-19 22:23:19,309 [irectoryImportLauncher] [INFO ] Cleaning up temp file C:\Windows\TEMP\63c7b33535ff426cbc53a011d7f38dca_20170719220058509.actdir.gz. 2017-07-19 22:23:19,309 [irectoryImport.Program] [INFO ] Import failed. Cause A defect in the ADimport exe file will randomly cause AD import timeout error specified as above log Workaround The attachment including a patch of the issue. Please follow the instructions below. 1. Go to the installation folder of beacon machine. (default location : C:\Program Files (x86)\Flexera Software\Inventory Beacon\DotNet\bin) 2. Take the backup of original ActiveDirectoryImport.exe file (for backup purpose) 3. Extract the attached file (ActiveDirectoryImport.zip) and replace the existing ActiveDirectoryImport.exe file 5. Run the Active Directory connection through Beacon UI 6. Wait for finish the import (may be with or without error) 7. Get the log file for Active Directory import and send back to us. (C:\ProgramData\Flexera Software\Compliance\Logging\ActiveDirectoryImport\ADImport.log) If the error still persist , Please restore the ActiveDirectoryImport.exe and send the updated log and send it to Flexera Support for further investigation. ... View more

Summary This knowledge base will explain a current product behavior that why user will see 'Oracle Instance' value appearing as 'Oracle Database' or 'Oracle Database Option' in the Oracle Instance page. Synopsis FlexNet Manager Suite user will notice the following Oracle Instance value. Sometimes it will appear as 'Oracle database 11g R2 Unspecified' or showing the value as the Oracle Database Option 'Partitioning 12 R1'. etc Discussion In general, ?Oracle Instance and Oracle Database Edition value is coming by running Oracle Database Inventory process. However in some circumstance either the device may not run the Oracle Inventory task or the inventory comes from other inventory source eg: sccm etc. Then we will use other methodology when the Oracle Database or Oracle option is recognized for instance by OUI evidence that Oracle is on the machine, Current product will add the Oracle Database version (unspecified Edition) as instance Name . But lacking Oracle inventory which can be used to confirm the edition info. FNMS auto-creates instance records for Oracle products attached to an Oracle Processor / NUP license type. It works the same way with middleware and any application. The advantage is that it makes sure these installations will consume an Oracle Processor / NUP license. Without an instance record, they will not. This is very deliberate. Without this behavior, User will end up with massive blind spots if they have not ensured that 100% of their Oracle devices are currently reporting healthy Oracle inventory. ... View more

Summary This knowledge base article provides an instruction on how to edit a Child Beacon registry key entry -- CertificateFile and why it may need to be done. Synopsis When a child beacon (not a top level beacon) is configured in an FNMS Cloud hierarchy or if the registry value exists in an OnPremises beacon, the beacon fails to download policy as it is unable to verify the Cloud certificate configured against the connection from the parent beacon or FNMS (OnPremises) server.  You may see the beacon test connection is successful but the  Beacon control file (policy) is missing error being displayed on the beacon UI.  The BeaconEngine log may also indicate the following error: [Rules.PolicyClient |policy] [ERROR] Failed to verify policy signature. Discussion This is required because the default configuration of a beacon is based on the assumption that it will connect to the FNMS Cloud infrastructure directly. As such, it expects data to be securely signed by Flexera as it comes across the Internet. However this assumption does not hold for child beacons which communicate to another beacon within the client environment rather than FNMS Cloud or on FNMS OnPremises implementations; deleting the registry entry fixes resolves this scenario The following registry entry needs to be deleted (renamed to other): HKLM\SOFTWARE\Wow6432Node\ManageSoft Corp\ManageSoft\Compliance\CurrentVersion\CertificateFile ... View more

Summary This article will describe a product internal issue of FNMS product version 2016+ with a workaround approach. Customer may receive unexpected error red message while viewing 'All Inventory' page. Symptoms This article will describe a product internal issue of FNMS product version 2016+ with a workaround approach. Customer may receive unexpected error red message while viewing 'All Inventory' page. https://www.flexnetmanager.com/Suite/ComputerProperties/List/All The specific red error bar saying: An error has occurred while retrieving information; you may need to refresh the page.' The specific error in the webui.log: "All Inventory page loading error - ASP._Page_Views_ComputerProperties_Templates_Display_AssetLink_cshtml.Execute()" Cause This a data related product defect has been identified on version FNMS 2017, potential it will hit prior version as well. Combining with the following conditions , you may hit the error: 1. You have Virtual Machine & VIrtual Host in your inventory list 2. You have added 'Linked Asset' in the grid view from column chooser 3. You have selected a large number of row per page value eg: 1000 Red Error may occur while your UI with above setting. Resolution A defect has been reported on FNMS 2017 version via FNMS-45178 for further fixing. Workaround 1. Go to affected page ,but added reset in the URL suffix as below to have a force reset all grid back to default value https://www.flexnetmanager.com/Suite/ComputerProperties/List/All?reset 2. Then go back to "Discovery & Inventory" --> "All Inventory" page , where the grid is now showing default columns 3. Select "Host" column from Column chooser First 4. Select "Linked Asset" column from column chooser as second PS. "Linked Asset" has to be added into grid after "Host" column being added. If opposite , you may hit the error. Additional Information If the above workaround doesn't help , For On Premise FNMS customer , please provide with the WEBUI.log with exactly error UID from the UI page For On Demand FNMS customer , please provide with the UID from UI page send the error with description to Flexera Technical Support for further assistance. ... View more

Summary This Knowledge article will describe a migration issue on error "Cannot drop index ?PK_ComplianceDomain? because it enforces the full-text key for table or indexed view". It provides with the reason of the cause and the workaround. Symptoms A migration script defect has been identified which affected the customer if they have Full-Text Index enabled on the FNMS table. (It happens likely on the old customer in MMC v9.23 or before) Then the following script will run into drop FK constraint failure and cause the migration broken The specific error message is: Cannot drop index ?PK_ComplianceDomain? because it enforces the full-text key for table or indexed view. Cause A current migration script defect may occur when customer used to have old FlexNet Manager Suite with full-text index required in version 9.2.3 or older eg: for contract portal feature in MMC version of product. The current migration script will run into error on any Full Text Indexed tables which were setup in v9.2 Resolution It is a known defect and logged under FNMS-46828 Workaround Use below SQL query to find out how many SQL tables are full-text index enabled in the old version of FNMP SELECT * FROM sys . fulltext_indexes Then Open SQL Server Management studio and right click each of above sql table and Delete the full text index associated with. By doing that the migration script will run through , the only downside is the Contract portal will take longer time on text search than before. However 2014+ contract portal is a depricated feature. Therefore you need take your own risk to consider this workaround. ... View more

Summary In some circumstancse, the imported File Evidence for the usage tracking does not contain the installation match counts. It also does not necessary matched by an existing ARL rule which logically should be covered. Such File Evidence is still need link to the application manually for tracking the usage. Symptoms /* For main workflow how to configure application usage tracking, please check KB: Q200826 */ This article will describe something doesn't cover by above KB but is useful for configuration AUT. It applies from FNMP 9.2.3 to older version. In some circumstancse, the imported File Evidence for the usage tracking does not contain the installation match counts. It also does not necessary matched by an existing ARL rule which logically should be covered. Such File Evidence is still need link to the application manually for tracking the usage. From sql DB structure perspective, there are some file evidences entries after compliance importer is completed, Those FE exist in the ImportedInstalledFileEvidenceUsage, but not in the ImportedInstalledFileEvidence. Such File Evidence will be found FNMP UI with 0 match counts as Unassigned (unmatched). In ARL logic the matching on file evidence is by matching Primary Key (Name,Version,Company, Description & FileSize) , however such usage file evidence will not be run through ARL matching mechanism. In another word even we have a ARL rule can cover the raw entry, the current product will create a raw entry with 0 match counts into FNMP still. The following sql query can be used to find such file evidence (only in ImportedInstalledFileEvidenceUsage not ImportedInstalledFileEvidence) /* checking the format of File Evidence) SELECT * FROM ImportedFileEvidence WHERE ExternalFileID IN ( SELECT ExternalFileID FROM ImportedInstalledFileEvidenceUsage WHERE ExternalFileID NOT IN ( SELECT ExternalFileID FROM ImportedInstalledFileEvidence ) ) /* checking the usage information eg: LastUsedDate */ SELECT * FROM ImportedInstalledFileEvidenceUsage WHERE ExternalFileID NOT IN ( SELECT ExternalFileID FROM ImportedInstalledFileEvidence ) Resolution 1. Pick the 'new' unassigned File Evidence 2. Link to the corresponding SoftwareTitle 3. Make sure this SoftwareTitle Recognition is already happened via other ARL (through Installer Evidence, File Evidence, WMI, Suite etc) 4. Setting the Usage Period correctly 5. Create a license and link this application to the license 6. Another full Inventory Import (Not Reconcile only) See attached file as a demonstration. ... View more