Symptoms:  When you are using a beacon connected to our cloud endpoint, beacon.flexnetmanager.com, you receive an SSL/TLS error stating that the connection could not be made: Clicking OK on the error, going to Beacon configuration > Parent connection, and clicking Test connection will show failed for parent inventory beacon, but download and upload test succeed: Diagnosis: This is caused by missing cipher suites on the server that is hosting the beacon. The endpoint beacon.flexnetmanager.com is failing due to the change in certificate provider where this cipher suite is required to establish the TLS connection. The endpoint data.flexnetmanager.com may still work without error, as that endpoint is still using an older certificate type at this time. Solution: You will need to ensure that the cipher suite, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, is enabled on the server. If this is disabled, it was most likely controlled via Group Policy on the server, and you will want to work with your System Administrator/Security teams to have this enabled. You can also use a utility like ‘IIS Crypto’ that will allow you to verify and configure the cipher suites easily. Within IIS Crypto, you will want to go into the Cipher Suites view, find TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, enable this with the check box, check the Reboot check box, and then press the Apply button. Once the server is rebooted, this cipher suite will be enabled, allowing the beacon to connect to the endpoint without error. If you recheck this value after reboot and see that it is unchecked again, this would indicate that this value is still being controlled by Group Policy or something else that would clear this on the system startup. IIS Crypto: Group Policy:   ... View more

Symptoms When using SQL Server 2016 SP2 CU16 (13.0.5882.1) to host the FNMS databases, you may start to see inventory import and license reconcile tasks failing with the error Execution Timeout Expired. This will always timeout regardless of the timeout limit set in the environment, and you will see errors like the following in the importer.log from the inventory import and license reconcile: Failed to execute Writer 'WriteComputers - set calculated user' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Writer\Computer.xml, at step line 1 Error: Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.   Failed to execute Writer 'MatchAccessingDevice' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Writer\AccessEvidence.xml, at step line 1 Error: Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.   Updating License compliance status based on new install counts. 2021-03-30 03:12:41,043 [ERROR] System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.Data.SqlClient.SqlException: Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding. ---> System.ComponentModel.Win32Exception: The wait operation timed out Diagnosis: This is caused by a bug in SQL Server 2016 SP2 CU16 (13.0.5882.1), that has been addressed in SQL Server 2016 SP2 CU17 (13.0.5888.11) Solution: To resolve this issue, you will need to apply CU17: KB5001092 - Cumulative Update 17 for SQL Server 2016 SP2  ... View more