Summary Binscope 2014 Failures seen in FlxComm64.dll, FlxConnect64.dll, and FlxCore64.dll Question We ran the BinScope-2014 tool against the 2018.02 FNE DLLs and observed DefaultGSCookieCheck failed. Apart from the DefaultGSCookieCheck, the following checks also fail: ATLVersionCheck ATLVulnCheck CompilerVersionCheck GsCheck GSFriendlyCheck GSFunctionSafeBufferCheck RSA32Check VB6Check. Is this expected? Answer The checks failed as the ?pdb? file for the corresponding dll?s were not used. The results are as expected. If you run Binsope 2014 against the FNE 2018.02 kit for FlxComm64.dll, FlxConnect64.dll, and FlxCore64.dll, you'll get the expected results. In summary, the tests fail because you don't have our debug symbols. ... View more

Summary FlexNet Embedded 2015 License Server (ULLS) Release Notes Synopsis FlexNet Embedded 2015 License Server (ULLS) Release Notes attached. ... View more

Summary FlexNet Embedded 2015 Release Notes Synopsis FlexNet Embedded 2015 Release Notes attached. ... View more

Summary Is FNO vulnerable to CVE?2014-6321? Question Is FlexNet Operations vulnerable to CVE?2014-6321? Running a system scan shows that there is a ?Critical Vulnerabilities for Apache Tomcat/JBoss Remote Code Execution.? The following article mentions this as well: https://isc.sans.edu/forums/diary/How+bad+is+the+SCHANNEL+vulnerability+CVE20146321+patched+in+MS14066/18947 Answer The public documentation about this vulnerability indicates it is a problem within the Windows operating system: https://technet.microsoft.com/en-us/library/security/ms14-066.aspx You should be able to apply patches from Microsoft and the vulnerabilities should then disappear from the scan result list. ... View more

Summary FNO defaulting to customer portal instead of admin console Question We used to log into http://localhost:8888/ and got logged into the 'Flexnet Operations Administrative Console'. Now however, we appear to get logged into the 'Flexnet Operations Self-Service Portal'. Where can we make the appropriate modifications to be redirected to the Admin Console when loging into localhost:8888 ? Answer Please check your copy of flexnet.lic to see if any of the INCREMENT lines have perhaps expired? If they have, you need to get a new FlexNet Operations license for that system. To generate a new FlexNet Operation's license (to run FNO, itself), please log into the Product and License center using the same login you used to submit this case: https://flexerasoftware.flexnetoperations.com/control/inst/login?nextURL=/control/inst/index Select the "FlexNet Operations" product. Then click on the "Licenses" link of the version of FNO you want to generate a new flexnet.lic license for. Restart the server after replacing the old license and that should solve the problem. ... View more

Summary Having difficulty converting email templates from XSL to the new merge-tags Question Where is a complete list of available merge-tags for email templates? Answer The tags are available in the UI when editing the template; they are not itemized in any other document. Actual data tags that were available in the XML templates are still be available in the new templates, but the [[FOR-EACH]] constructs are new and replace the XSL constructs. Additional Information For example, if you are specifically having problems locating the PartNumber within the Merge Tags, the XSL you may have used in a prior version of FNO would be as follows: <xsl:template match="EntitlementLineItems"> <xsl:for-each select="EntitlementLineItem"> <tr> <td><xsl:value-of select="@ActivationID"/></td> <td><xsl:value-of select="Product/Name"/></td> <td><xsl:value-of select="Product/Description" disable-output-escaping="yes"/></td> <td><xsl:value-of select="PartNumber"/></td> <td><xsl:value-of select="SeatCount"/></td> </tr> </xsl:for-each> </xsl:template> If your code for this in the new templating mechanism looks like: [[FOR-EACH TAG="EntitledProduct"]] <td>[[Name]]</td><td>[[Description]]</td><td>~~SJMPartNo~~</td><td>[[Count]]</td> [[END FOR-EACH]] But you're finding that you have to use a placeholder with an external call to a database connection to make this work, instead try [[PartNumber]] on the line item (like in the XSL template), not on the product. In the existing Entitlement template, if you add the third line down (Partner Number: [[PartNumber]]) after ActivationID, you should get the part number on the line item. In template: ? [[FOR-EACH TAG="EntitlementLineItem"]] ActivationID: [[ActivationID]] Part Number: [[PartNumber]] ? In email: ? ActivationID: sepn-1 Part Number: PN1 ? ... View more

Summary What is an Activation ID's auto-generated format range? Question We noticed FlexNet Operations auto-generated Activation IDs changed from the following format: ef58-4551-4b9e-55b4-377f-f93 to this ef58-4551-4b9e-55b4-377f-f9 If we want to customize our Activation Utility with a format checker to prevent users from entering a bad Activation ID, what?s the format range for the auto-generator we can set parameters for within our utility? Answer In site/samples/idgenerator/CustomIdGenerator.java, you can see the same logic used in generateLineItemID() in the OpsEsnGenerator class. The length at least partly depends on how many non-alphanumeric characters are stripped out, but there are not more than 4 characters per group. You can also write your own ID generator if you want control over the IDs for validation purposes. ... View more

Summary How to set the client registration configuration for the on-prem Cloud Licensing Service Question This configuration controls whether or not the client is required to register itself, using a baseline activation id, prior to interacting with the CLS instance. Refer to the FlexNet Operations Getting Started Guide for Cloud Licensing Service for more details. Answer To set the configuration, you need to do a PUT against the REST endpoint, and include the following JSON payload: REST endpoint: http://localhost:8888/gls/api/1.0/configuration {"licensing.registrationRequired": false} to disable client registration {"licensing.registrationRequired": true} to enable client registration This article is relevant for FNO 2016 R1 and later. ... View more

Summary Can custom attributes be made as optional in Webservice? Question We're using FlexNet Operations (FNO) 2016 R4 on-premise, and using LicenceSevice to generate certificate licenses and assigning values to default custom attributes like CUSTOMER_EMAIL, CUSTOMER_LANGUAGE (etc) through attributeDescriptorType. It works fine if the associated license model has those custom attributes already assigned, otherwise it fails. Is there any way to make them optional? Meaning they?ll always supply these attribute values? I.e., if the model doesn't have attributes, then it won't assign values in FNO, but API should not fail. We considered using getFulfillmentAttributesRequest to query attributes, but don't have data to supply with this request. Is there a programmatic solution to this using the Web Services API if the attribute value is not provided? Answer If values are supplied that are not expected, the API call should fail. You'll need to add these custom attributes (even if not used) to each of their license models if you want to send the data each time. So the answer to your question is, no, they are not optional. ... View more

Summary How do you include the value of a custom organization attribute in the vendor dictionary of FNP trusted activation responses? Question How do you include the value of a custom organization attribute in the vendor dictionary of FlexNet Publisher trusted activation responses? Answer We provides a sample class, VendorDictResponseGenerator in site/samples/trusted, that can be used as an example to populate vendor dictionary values in FNP trusted activation responses. This sample can be modified to populate the vendor dictionary with the value of a custom organization attribute from any of the organizations in the channel partner set of the fulfillment's entitlement. Once compiled against the FlexNet Operations public API, placed in the custom/webapps/flexnet/WEB-INF/classes directory, and deployed, the name of this callout is configured in FlexNet Operations in System -> Configure -> Trusted Storage -> Generator for Custom Attributes in Online Response. Once configured, the server must be restarted. This example will populate the vendor dictionary with the fulfillment ID and the non-null value of an organization text attribute named ORG_TEXT from the organization in the End Customer tier of the simple entitlement. In this simple case where the organization in the End Customer tier is used, the getSoldTo method can be used instead of traversing the entire channel partner set of the entitlement. import java.util.HashMap; import java.util.Map; import java.util.Iterator; import java.util.List; import com.flexnet.operations.publicapi.CustomAttribute; import com.flexnet.operations.publicapi.EntitlementLineItem; import com.flexnet.operations.publicapi.FulfillmentRecord; import com.flexnet.operations.publicapi.FulfillmentRequestTypeENC; import com.flexnet.operations.publicapi.OperationsException; import com.flexnet.operations.publicapi.OrganizationUnit; import com.flexnet.operations.publicapi.SimpleEntitlement; import com.flexnet.operations.publicapi.VendorDictionaryResponse; public class VendorDictResponseGenerator implements VendorDictionaryResponse { public Map<String, String> getResponseVendorDictionary(FulfillmentRecord fr, boolean isSuccess, FulfillmentRequestTypeENC operationType) throws OperationsException { Map<String, String> responseMap = new HashMap(); if (fr != null) { responseMap.put("FULFILLMENT_ID", fr.getFulfillmentId()); EntitlementLineItem eli = fr.getLineItem(); SimpleEntitlement se = eli.getParentEntitlement(); OrganizationUnit soldTo = se.getSoldTo(); List<CustomAttribute> attrs = soldTo.getCustomAttribute(); Iterator<CustomAttribute> iter = attrs.iterator(); while (iter.hasNext()) { CustomAttribute attr = iter.next(); if (attr.getName().equals("ORG_TEXT") && attr.getValue() != null) { responseMap.put("ORG_TEXT", attr.getValue()); } } } return responseMap; } } The following entries are added to the response: Vendor dictionary entry: FULFILLMENT_ID = <fulfillmentId> Vendor dictionary entry: ORG_TEXT = <orgAttrValue> ... View more

Summary Is there a WebService to lookup all licenses that were activated by short code? Question Is there a WebService that can search for items activated via short code? Answer The query parameters of getFulfillmentPropertiesQuery and getFulfillmentsQuery include ActivationType that can be set to SHORT_CODE. This will return fulfillments generated via short code. ... View more

Summary Is there a merge tag for Maintenance End Date available? Question Is there functionality in Flexnet Operations 2017 R4 to add the maintenance end date of the appropriate line item in the entitlement email sent? Answer Yes, the current version of FNO offers an entitlement email merge tag of maintenance line item expiration date. There is a for-each merge tag to loop through maintenance line items and there is an [[ExpirationDate]] merge tag supported in that loop. Also, as of FNO 2017 R3, the old XSL template content can be adapted to be used in the new email templates. Additional Information Here is the syntax to use the LinkedMaintenanceLineItems merge tag: [[FOR-EACH TAG="Entitlement" child-only="true"]] [[FOR-EACH TAG="ChannelPartners" child-only="true"]] [[FOR-EACH TAG="ChannelPartner"]] <font color=red><br> Partner Tier Name: [[PartnerTierName]]<br> Org Display Name: [[Name]]<br> Org Name: [[OrgName]]<br> </font> [[FOR-EACH TAG="SelectedContact" child-only="true"]] <font color=blue> Contact Name: [[ContactName]]<br> Firstname: [[Firstname]]<br> Lastname: [[Lastname]]<br> Country: [[Country]]<br> Email: [[Email]]<br> </font> <br> [[END FOR-EACH]] [[END FOR-EACH]] [[END FOR-EACH]] [[FOR-EACH TAG="EntitlementLineItems" child-only="true"]] [[FOR-EACH TAG="EntitlementLineItem" child-only="true"]] <font color=green> ActivationID: [[ActivationID]]<br> Order ID: [[OrderID]]<br> Quantity: [[SeatCount]]<br> Start Date: [[StartDate]]<br> Expiration Date: [[ExpirationDate]]<br> Permanent: [[Permanent]]<br> Duration :<br> Length: [[Length]]<br> Units: [[Units]]<br> </font> [[FOR-EACH TAG="LinkedMaintenanceLineItems" child-only="true"]] [[FOR-EACH TAG="MaintenanceLineItem" child-only="true"]] <font color=brown> Maintenance Activation Id: [[ActivationID]]<br> Order ID: [[OrderID]]<br> Quantity: [[SeatCount]]<br> Start Date: [[StartDate]]<br> Expiration Date: [[ExpirationDate]]<br> Permanent: [[Permanent]]<br> State: [[Status]]<br> [[FOR-EACH tag="Product"]] Maintenance Product: [[Name]]<br> </font> [[END FOR-EACH]] [[END FOR-EACH]] [[END FOR-EACH]] [[END FOR-EACH]] [[END FOR-EACH]] [[END FOR-EACH]] ... View more

Summary Is cloud licensing expected to work with TLS (transport layer security) inspection by a web proxy? Question Is FlexNet Operations Cloud licensing expected to work with TLS (transport layer security) inspection by a web proxy? Answer Please take a look at the output from a scan performed on flex####.compliance.flexnetoperations.com, as you will see that TLS is supported. https://www.ssllabs.com/ssltest/analyze.html?d=flex####.compliance.flexnetoperations.com Please note #### is replaced with your hosted instance (for example flex1234.compliance.flexnetoperations.com). ... View more

Summary How to create a three server redundancy (triad) license within FlexNet Operations On-Premises? Question How can you create a license file for a three server redundant configuration within FlexNet Operations On-Premises? If you just select three hosts in the activation process, it does not work as expected. Answer After the license model is set to allow redundant server policy, the server hostid field has an icon that, when clicked, expands to allow three hostids (the icon looks kind of like a triangle made out of tinker toys). The first one should be set to primary in the resulting license file. Additional Information Make sure a port number is included on each SERVER line, after the hostid. ... View more

Summary FlexNet Operations 2014 SP1 Resolved Issues Synopsis Enhancements FlexNet Operations 2014 Service Pack 1 (12.11.0.1) includes the following enhancements: ? Internet Protocol version 6 (IPv6) values for host ID are now supported when a license is generated using FlexNet Publisher technology. IPv6 is intended to replace IPv4, and a user is now able to choose between a version 4 and version 6 IP address. ? The publisher user is now supported in the public API call com.flexnet.operations.publicapi.FulfillmentSearchCriteria when searching fulfillments, which prevents loss of fulfillment history and licensing data. ? FlexNet Operations 2014 was built against FlexNet Embedded 2014 (6.0) .jar files. Support for a hostid type of PUBLISHER_DEFINED has been added. By default, FlexNet Operations does not enable this type, and it is not shown in the user interface as an ID type that can be used to create a license server. To enable the PUBLISHER_DEFINED type, follow the same steps outlined for the EXTENDED type (but remove the PUBLISHER_DEFINED keyword from the excludedIdTypes= list in step 4a) in procedure To create a server device, before the local license server connects, using the default server host type of the FlexNet Operations Getting Started Guide for FlexNet Embedded Licensing. ? FlexNet Operations demonstration vendor certificate generator (VCG) executables were replaced with those from the FlexNet Operations 2014 VCG kit. Resolved Issues These issues have been resolved in FlexNet Operations 2014 Service Pack 1 (12.11.0.1). ? FNO-11138 A user with view permission was able to change the channel partner of an entitlement. ? FNO-11257 When a custom ID generator was implemented for bulk operations, license term information generated an error during bulk upgrade. ? FNO-11383 A potential attacker was able to interfere with another user?s license activation web service. ? FNO-11502 It was possible to bypass Enterprise Portal authorization restrictions to gain access to other organizations by linking the inaccessible organization as a suborganization. ? FNO-11505 Autocomplete was enabled for Enterprise and Producer Portal password fields. ? FNO-11579 FlexNet Operations was not able to load an application specification record (ASR) into trusted storage when handling multiple publisher.xml files. ? FNO-11616 It was possible to force the browser to load an external web page through FlexNet Operations Producer Portal on-line help. ? FNO-11637 The hardcoded serverHostID (?FLEXID=6-a6300155?) that FlexNet Operations uses to generate ASRs caused problems in FlexNet Publisher. ? FNO-11665 Product upgrade was not working properly following a trial ASR. The presence of a trial ASR on a client prevented FlexNet Operations from deleting the parent fulfillment after activating the child fulfillment. ? FNO-11711 Double quotes in an organization?s display name, when used as a substitution variable in the NOTICE field of a license, generated an error. ? FNO-11714 Some custom license model attribute values were not transformed to the FlexNet Operations reporting database. ? FNO-11747 A custom FlexNet Embedded signer worked in FlexNet Operations only if the signer?s CryptoType was CryptoType.CUSTOM. ? FNO-11757 A user was unable to set up clustered nodes with a load balancer when sticky session was disabled. ? FNO-11759 Checkout times were excessive when an entitlement contained a large number of linked activation IDs. ? FNO-11763 In the Enterprise Portal, it was possible to initiate a password reset for other users without permission. ? FNO-11773 The answer to a user?s security question was visible in the Enterprise and Producer Portals. ? FNO-11829 These country codes were missing when an organization was created: AX=Aland Islands; BQ=Bonaire, Sint Eustatius, and Saba; CD= Democratic Republic of Congo; CW=Curacao; GG=Guernsey; IM=Isle of Man; JE=Jersey; ME=Montenegro; PS= State of Palestine; RS=Serbia; SS=South Sudan; SX=Sint Maarten; BL=St. Bartelemy; MF=St. Martin; and TL=Timor-Leste. ? FNO-11906 An error message was displayed when a user navigated to the Manage Devices page with a web register key (activation ID) as a login parameter. ? FNO-11974 A time gap due to a missing FlexNet licensing sync message was not rejected by FlexNet Operations. ? FNO-12090 FlexNet Operations did not cache the last domain used during login. ? FNO-12461 Online and offline sync data was not properly updated in FlexNet Operations with feature, count, and device information. Discussion Workaround Additional Information Related Documents Related KB Articles ... View more