Hey @kclausen, Senthil's question stems from a customer who already has a client certificate pair installed in the Trusted Root Certification Authorities on  their end user Windows devices that is used for client authentication of another app.    The question is whether the agent can be configured to use that certificate.  This would remove the necessity to deploy a new cert to all end user devices.      My guess is the answer is no.  Reading between the lines in the documentation, it looks like the agent expects the certificate to be named after the inventory beacon as that seems to be the only way that the agent would know which certificate in the local cert store to use to authenticate itself. ... View more

Thanks Chris, In this case, the customer uses a tool called GateKeeper to ensure that all applications that are deployed on to cloud workloads meet policies that are based on the CIS benchmarks.    I guess that an example of this would be to verify that the Flexera Kubernetes inventory agent component does not violate the OpenShift CIS Benchmark.    Your answer at least confirms that the on-premise FNMS components have not been explicitly validated against any CIS benchmarks. Peter ... View more

Thanks for that clarification @jsubramaniyam. That's exactly the information that I was after. ... View more

Hi @jsubramaniyam , thanks for your detailed reply. I'm seeking further clarification of your statement: "May be while registering Flexera products like AdminStudio, AdminStudio Enterprise Server in FSG may call the FSG host process which can be found in the machine where FSG is installed." In particular, can you tell me: - Why is the AdminStudio Host service URL registered in the FSG? I would expect that the answer is that one of the the other Flexera products (i.e. Workflow Manager, FNMS or App Portal) uses that URL to invoke AdminStudio Host web services. Assuming that I'm right, can you confirm which of those products makes such a connection - Which AdminStudio Host service should be registered in the FSG? When I register AdminStudio Application Manager with the FSG, it registers its local host process URL. For example, if I register my local workstation Admin Studio Application Manager with FSG then it will register my workstation's AdminStudio Host (i.e. http://my_workstation_ip_address:8086) To me it doesn't make sense to register my workstation AdminStudio Host with FSG as the other Flexera products would unlikely be able to form connections to a workstation. I would expect that we would need to run an AdminStudio Host on a server (e.g. the Admin Studio Enterprise server) to support those connections. regards, Peter ... View more

Thanks @ChrisG , On second inspection, the client is actually currently using 2016 R1 SP1, so we're good.    Thanks very much for your help, Peter   ... View more

Hi @dpiarowski, Can you provide the details of the workaround for getting the App Portal Web Extension to work on Edge (Chromium) that you mentioned in your earlier post? ... View more