This article documents the FlexNet Embedded release highlights introduced each year, starting from 2020 R3 (2020.07) to present: 2021.03: CLS + LLS Licensing Server New streaming interface /clients and /features endpoints to query large client tables, hence improving the performance Resolved VMUUID detection issue on Google Compute Cloud (Windows only) for LLS The REST API /clients endpoint now returns the served clients when the borrow interval was set to 0s on both CLS and LLS Resolved time zone conversion issue for feature expiry on both CLS and LLS The issue with borrow granularity unit is now fixed 2021.02: CLS + LLS Licensing Server Support for JSON-format Logging on the Local License Server (LLS) Integration of LLS Logging with External Systems like Graylog, Elastic Stack Fixed the synchronization issue in failover scenario Improved performance for querying “/clients” endpoint for both LLS and CLS Fixed the trailing slash in JAVA_HOME system environment variable in LLS Correct version of OpenSSL reported in the LLS A number of third-party software modules used in the FlexNet License Server Manager have been upgraded. 2021.01: CLS + LLS Licensing Server New activeOnly query parameter has been introduced for “/features” endpoint for both CLS and LLS Return of counts for multiple activation IDs with identical expiry date issue has been fixed on CLS Resolved client expiry issues on CLS Support for PKCS #12 keystores in LLS Resolved VM_UUID detection issue on Google Compute Cloud for LLS Resolved MAC address issue related to hostid case sensitivity. 2020 R3 SP3(2020.12): CLS + LLS + Client Kits Licensing Server License activation using REST API and .NET on both LLS and CLS Usage reports could show duplicate rows with a feature count value of zero for every checked in feature is fixed on CLS Enhanced the model definition upload using the /rules API for long list of hostids—containing 10,000 hostids on both LLS and CLS Used feature counts correctly returned to license pool after effective borrow interval expired Updated open source third party components and dependencies have been removed Resolved flexnetlsadmin to CLS communication issue Fixed the issue that caused error while running local license server(LLS) in console mode Client Kits Improved Cloud Platform detection which fixes the that occasionally detect and return an incorrect hostid value for VM_UUID Resolved VM_UUID detection issue on Google Compute Cloud Releasing of system resource 2020 R3 SP2(2020.10): CLS + LLS + Client Kits Licensing Server Springfox-Swagger has been upgraded to version 2.9.2 in both LLS and CLS. This upgrade addresses potential security issues. Spring Boot has been upgraded to version 2.1.2 in both LLS and CLS to address potential security issues. Enhanced Logging Functionality on the Local License Server. A new logging style configuration parameter has been introduced for the LLS, to configure timestamp behaviour. Resolved below FlexNet License Server Administrator Issues “-reset” command resets the security.enabled policy back to its original default value set by the producer. “-licenses” command now returns correct feature count “-licenses -verbose” command now returns correct value for available counts A number of third-party software modules used in the FlexNet License Server Manager have been upgraded Client Kits Fix for potential memory leak (Linux XT only) 2020 R3 SP1 Hotfix(2020.07.1): CLS only Licensing Server Feature counts are now consumed from correct activation id. For metered features, counts could be consumed from an incorrect activation ID. This issue was due to a change in the sequence of returning used counts. Resolved Client Expiry Timer issue Fixed incorrect expiry date 2020 R3(2020.07): CLS + LLS + Client Kits Licensing Server Feature Partitions The maxCount field now indicates how many counts of a feature are available, regardless of how many counts have been requested. The active hostid set using FlexNet License Server Manager or using the REST APIs now persists in the database. It is no longer necessary to reset it after a server reboot Improved FlexNet License Server Administrator Output Resolved REST API pagination issue CLS performance improvement Resolved server borrow interval issue Updated open source component Jackson Databind in FlexNet License Server Manager In the FlexNet License Server Manager user interface added new Start Date column and New Device Alias column Client Kits Identical Correlation ID generation issue has been addressed (C XT SDKs only) Resolved issue related to connecting to server via proxy (C XT SDKs on macOS only). Resolved issues with redirected URLs (.NET XT SDKs only). Amazon AWS EC2 detection no longer causes XT client crashes (XT SDKs only) ... View more

This post includes the release highlights and other important release dates related to the FlexNet Operations Cloud 2021.04 products. To stay informed of upcoming releases, be sure to subscribe to the Software Monetization Release Schedule page on the Revenera Community. FlexNet Operations Cloud 2021.04 ALM/LLM is available on UAT (released April 7th) FlexNet Operations Cloud 2021.04 ALM/LLM production is planned for Tuesday, April 13th (no outage required) This release includes customer-specific changes and issue fixes. If you have any questions about the release, please contact the Revenera Technical Support team for more details. ... View more

Latest Post:   The FlexNet Operations Cloud 2021.04 release has been rescheduled to the following dates. This release will include a reduced scope, focusing on customer-specific changes.   FlexNet Operations Cloud ALM/LLM April 7: UAT (no outage) April 13: Production (no outage) We plan for a bigger release in May. If you haven't already done so, we recommend subscribing to this blog to receive the latest release updates.    If you have any questions or concerns, please reach out to your Revenera contact or the Revenera Technical Support team. Original Post ( ‎Mar 31, 2021   12:03 PM)   Late in our testing cycle, the Engineering team observed performance degradation in the FlexNet Operations Cloud 2021.04 application. Their analysis identified the root cause and found the performance issue was due to architectural changes we made to the FlexNet Operations Cloud database. The Engineering team has a solution for the issue; however, they will require additional time to execute and re-validate the fix.   For this reason, we are postponing the release (PCS/UAT that was scheduled for April 1st; Production that was scheduled for April 17th).   The team is working to finalize the new release dates and we will update this post, as well as the Software Monetization Release Schedule page, as soon as we have that information. We recommend you subscribe to these boards for further updates.   If you have any questions or concerns, please contact the Revenera Customer Success and Support teams for assistance.   We sincerely apologize for the delay and any inconvenience this may cause. We strive to do better and appreciate your continued patience. ... View more

We wanted to notify you of a change to the Code Insight End-of-Life (EOL) policy and offer guidance on its impact to you and your business. Code Insight v6 is a stable release with minimal new features. It is reasonable to expect certain customers to want to remain on a version that works for them. For this reason, Code Insight v6 is on a 3 year standard cycle + 1 year limited cycle from the GA release. The last Code Insight GA release was 6.14.2 in November 2020. Going forward, the plan is to release two service packs per year. Code Insight v7 is released quarterly and each release includes new features and critical bug fixes. To encourage customers to upgrade to the most recent and secure versions of the Code Insight, we are making the following changes for Code Insight v7: We are eliminating the limited cycle, and reducing the standard cycle to 2 years As a standard policy, bugs reported against past releases will be reproduced against the latest release and fixed in an upcoming release; no back-porting of functionality will be provided Data updates will only be guaranteed for supported Code Insight releases If the release cadence for Code Insight v7 changes in the future, we will revisit the EOL policy What does it mean if my version of Code Insight is end-of-life (EOL)? If you are on a version of Code Insight that is outside of the supported cycle as defined by https://docs.revenera.com/eol/codeinsight.htm (4 years past the GA release date for Code Insight v6 and 2 years past the GA release date for Code Insight v7), you have the following options: Option 1: Do nothing and remain on the version you are on today Your Code Insight product license entitles you to continue to use Code Insight until your license expires There is a strong recommendation from Revenera, but no mandate to upgrade to the current release of Code Insight The support team will no longer provide support or troubleshoot issues for the end-of-life Code Insight releases The electronic data update is not tested against end-of-life versions of Code Insight; therefore, if there are unforeseen issues with the data updates, the support team will not troubleshoot these issues Option 2: Upgrade to a more recent supported release of your version of Code Insight Upgrading within the Code Insight version, such as v6 to v6 and v7 to v7 is fully supported Contact the Technical Support team and they will be happy to assist you with this task Option 3: Contact Revenera to discuss upgrading from Code Insight v6 to Code Insight v7 Code Insight v7 is our strategic vision, and will eventually be the only supported version of Code Insight We are highly motivated to make the migration for our Code Insight v6 customers to Code Insight v7 as simple as possible Right now upgrades from Code Insight v6 to Code Insight v7 are evaluated on a case-by-case basis Please reach out to your CSM or Technical Support for more information and to assess whether this is the right time for your organization to move to Code Insight v7 based on your deployment details We strive to deliver high quality products and appreciate our partnership with you. As always, we welcome your feedback. Please reach out to your Revenera contact or the Revenera Technical Support team if you have any questions or comments about these changes. ... View more

InstallAnywhere 2021 is now available for download. What’s new in InstallAnywhere 2021: New: macOS Big Sur Support and Support for Apple M1 You can now build installers that run seamlessly in the latest macOS version (Big Sur). New: File Association in Windows You can now define apps for file associations in Windows. New: 8.3 actions Action to enable 8.3 naming convention in Windows. Enhanced: Improved macOS support Stability of notarization is improved and a new utility to automate notarization of installers in macOS. Enhanced: Get User Input Panel options Ability to define mandatory fields in the Get User Input Panel. For more information about the new features and enhancement, please refer to the InstallAnywhere 2021 Release Notes. Get Your Copy of InstallAnywhere 2021 Now! To download the latest version, sign into to the Revenera Community and click Other Resources -> Product and License Center -> Let’s Go button. Note, your community login must have access to your Product and License Center login to access the download. If you are unable to access the Product and License Center, please reach out to our Revenera Support team. Thank you for your continued interest in and support of InstallAnywhere. Revenera Team ... View more

The FlexNet Embedded 2021.03 release is now available for download from the   Product and License Center. This release introduces new streaming interfaces that optimize retrieving large number of clients or features, allowing software producers to build custom user interfaces for their users. The client and feature details are returned as individual, newline-delimited entities, in JSON. This release also include product fixes to the Cloud Licensing Service. There are no client changes in this release.  For more information about the release, please see the FlexNet Embedded 2021.03 License Server Release Notes, which are also available in the   Product and License Center. ... View more

We are happy to share that Code Insight 2021 R1 is now available on the Product and License Center . Below you will find product release highlights, references to additional resources, and upcoming event information. Release Highlights   Scanning Rescan options for unmodified files to control which files are rescanned. License detection results for scan agents. Plugins Jenkins plugin support for generating and storing Code Insight reports after a scan. This allows seeing an overview of scan results, inventory, and compliance issues directly in Jenkins without needing to log in to Code Insight. Security Improvements CVSS v3.1 support for security vulnerabilities along with the corresponding vulnerability vector string. Reports Moved reports to a separate project reports tab for improved usability. APIs New API for queued report generation for improved concurrent processing. Component lookup API forge filter to allow more specific queries based on specific repositories. Improvements to get all scanned files API to include evidence, review, and inventory state for each scanned file. Project hierarchy API to support management of child projects via API. Enhancements and Issue Fixes Additional fixes to reduce Web UI slowdown during scan. Improvements to detection notes to indicate which automated detection technique contributed to the inventory item. Vulnerability false positives fixes for jars and Node.js via improved vendor mappings. For more information about the release content above, please refer to the Code Insight 2021 R1 Release Notes on the Documentation site. Download Information   Customers may download Code Insight from the  Product and License Center . This site requires credentials from Revenera. To access the Product and License Center, be sure to register for the Revenera Community and provide the Account ID and Product ID information included in the Order Confirmation email sent by Revenera.   If you are unable to access the Product and License Center, or have not been granted access, please contact our Revenera Technical Support . Upcoming Events We are hosting this month’s SCA Customer Office Hours on March 25 th at 9:30AM PDT. This session we will cover the Code Insight 2021 R2 release and provide a sneak peek into the Code Insight 2021 R3 release. To participate, click here to register for the event. ... View more

The Revenera Community is your primary resource for information about Revenera product. The community search taps into various Revenera content resources and provides you with the results in a single search interface.  This article points out key community search features and how best to leverage them.  Searching for Information Users can search for information from the main landing page. As they enter their search criteria, the community search may suggest results based on their search terms, without requiring them to complete the search. Suggestions with the 'green' checkmark indicate the content has been marked as a solution.   Assessing Search Results If the suggested results do not provide the information you need, the search will display the results on the next page. Users can filter their search based on the content source e.g. documentation site, community, learning center, etc. Users can also filter their results by the product or content type e.g. forum, kb, blog, etc.     Refining your Search If the search is too broad, users can refine their search by defining an exact phrase, including specific terms, or excluding unwanted terms. For more details about this capability, please see the Refining Your Search article.    Bookmarking Searches Frequently used searches can be bookmarked for future use. Click the star icon in the top right corner of the search page to name and save your search. To retrieve this search later, click the book icon in the top right corner of the search page to pull up a list of your previously bookmarked searches. To remove bookmarks, select the bookmark and click the Remove Bookmark button. Customizing your Search View Users can personalize the search view by clicking the gear icon in the center right portion of the search window. Click the customize icon as denoted by the pencil.  Users can then hide search details or rearrange the search filters.  Click Apply Changes button to complete the customization.   Using Classic Community Search The Revenera Community has native search capabilities that restricts the search to the community only. To use this, click the Use Classis Community Search to the right of the search bar.  For more information about how to use this search, please see the Tips and Tricks for Using Classic Community Search article. ... View more

The recording and slides for March's office hours session are now available on the  Revenera Learning Center . This session includes:   SCA Updates 2021 R1 release overview 2021 R2 sneak peek Open Q&A If you have any questions about the topics above, feel free to post here or in the  Product Discussion  board. Team Revenera ... View more

Refine your searches with search operators and the advanced search filter to find what you are looking for in less time. Our search provides three Boolean operators, an exact match capability, and two wildcards—for terms and characters respectively. To use any of any operator, prefix your search query with an octothorpe ( # ). Example Search Query # "salesforce" NOT "lithium"   finds all documents that have the keyword   salesforce   but don't have the keyword   lithium . Search Operators Operator Description Example AND Returns documents containing the terms or phrases on the left and right of   AND # content AND source AND dynamics   (Find documents that have all three keywords in them: "content", "source", and "dynamics".) && Same as   AND # content && source && dynamics OR Finds documents containing either of the terms or phrases around   OR . # searchunify OR su   (Find documents that have either "searchunify" or "su" in them.) || Same as   OR . # searchunify || su NOT Excludes documents that contain the term or phrase followed by   NOT . # jira NOT "jira on premises"   (Find documents that have the keyword "jira" but not the keyword "jira on-premises".) " " Exact match operators. Finds documents containing this exact phrase or term. # "recognise"   (This search will ignore documents that have "recognize", "recognized", "recognised", "recognization" and other forms of "recognise".) + Limits the search to documents that contain the term or phrase following   + . # mamba +20   (Find documents that necessarily have the keyword "20", along with "mamba".) * Wildcard for terms and phrases. # "how to * salesforce content source"   (Find documents that have phrases, such as "how to set up salesforce content source", "how to install salesforce content source", "how to delete salesforce content source".) ? Functions as a wildcard for single-character term. # "synchroni?e"   (Find both "synchronize" and "synchronise".) Advanced Search The most frequently used operators have been added to Advanced Search. Run a search. Use the search drop down to refine your query. Search Terminology Term: A string delimited by space characters. Phrase: An array of terms. File: A Microsoft Word document, PDF, webpage, image alt-text, issue, ticket, meta data, or any piece of content that can be crawled and indexed. ... View more

We're excited to announce the addition of a Code Insight Product Feature Overviews course on our Revenera Learning Center. This course will include walkthroughs and demonstrations of core Code Insight capabilities, such as Inventory, Bill of Materials, REST APIs, and our Custom Report Framework.    If you're a Revenera Community user, you can register for the course now on the Revenera Learning Center. If you haven't created a Revenera Community user login yet, you can also watch the recordings on our Software Composition Analysis YouTube playlist.   ... View more

Final Update: The new searching capabilities and user interface are available on the Revenera Community.  -------------------------------------------------------------------------------------------------------------------------------------------- Update (March 8, 2021 at 3:46 PM): The production push to release the enhanced search has been rescheduled for March 8, 2021 at 9PM PST. An update to this post will be published once the new search is live.  -------------------------------------------------------------------------------------------------------------------------------------------- Update (March 7, 2021 at 8:39 PM): In preparation for the production push, we encountered an issue that would have impacted our customers' ability to use core community functionality. For that reason, we will postpone the roll-out of the enhanced search capabilities until the issue has been resolved. We will confirm the new release date on this thread.  -------------------------------------------------------------------------------------------------------------------------------------------- Original Post (March 4, 2021 at 3:31 PM) On March 7th, we plan to roll out enhanced searching capabilities to the Revenera Community. After the change, searches will query across a variety of Revenera content sources, giving community users a more comprehensive search and increasing the chances of finding the information they seek. As part of this change, community users will also see a new search interface, which will allow them to filter their results based on the source and by content type. We plan to start the deployment at 9PM PST. During this rollout, community users may experience some service disruption to the community user interface.   An update to this post will be published once the new search is live. Team Revenera ... View more

Latest Update: FlexNet Operations Cloud 2021.03 ALM and LLM are now in the Production environment. Please see the information in the original post below, for the release highlights. The FlexNet Operations Cloud 2021.03 ALM release notes can be found here. There will be no release notes for FlexNet Operations Cloud 2021.03 LLM. Original Post  Mar 02, 2021   09:29 AM: This post includes the release highlights and important release dates related to the Software Monetization 2021.03 products. To stay informed of upcoming releases, be sure to subscribe to the Software Monetization Release Schedule page on the Revenera Community. FlexNet Operations Cloud 2021.03 ALM FlexNet Operations Cloud 2021.03 ALM is available on UAT (released March 2 nd ) FlexNet Operations Cloud 2021.03 ALM production is planned for Tuesday, March 16 th (no outage required) This release includes the following changes: Entitlement Management: This release streamlines the users’ ability to download multiple software packages from the ‘List Entitlements’ page. Users can select from the list of software download packages available for the selected line items using the Downloads window.      For more information about the release, please refer to the release notes on our Documentation site.  FlexNet Operations Cloud 2021.03 LLM FlexNet Operations Cloud 2021.03 LLM is available on UAT (released March 2 nd ) FlexNet Operations Cloud 2021.03 LLM production is planned for Tuesday, March 16 th (no outage required) This release includes customer-specific changes. No release notes will be published for this release.  FlexNet Embedded 2021.03 Cloud Licensing Service 2021.03 is available on UAT (released March 2 nd ) Cloud Licensing Service 2021.03 production is planned for Tuesday, March 16 th (no outage required) FlexNet Embedded Local License Server 2021.03 GA is planned for Tuesday, March 16 th The FlexNet Embedded 2021.03 release includes the following changes: Streaming Interface: New streaming interfaces have been introduced to the FlexNet Embedded local license server. The new streaming interfaces are optimized to support retrieving large number of clients or features, allowing software producers to build a robust, custom user interface for their end users. The client and feature details are returned as individual, newline-delimited entities, in JSON. This release also includes issue fixes for the Cloud Licensing Service. There are no client kit changes for the FlexNet Embedded 2021.03 release. The release notes will be available on the Product and License Center at production and GA time. ... View more

Summary A local privilege escalation issue could give passage for exploit on Windows, has been reported on an optional service of FlexNet Publisher (FNP), usually used with trusted storage. If you do not depend on FlexNet Licensing Service, there is no impact to you and no further action on your part. Please see the Symptoms section for more details. Symptoms FlexNet Licensing Service on Windows works with an elevated privilege. The elevated privilege allows reading some information required to protect our customers against license misuse and to protect their Intellectual Property. It is possible to use the elevated privilege of FlexNet Publisher with attack vector for exploit on Windows. A local authenticated user is required in the attack vector and there is no "remote" (aka network vector) vector on this vulnerability. Through standard security measures, as applied in any local environment, the risk of this vulnerability being exploited is considered low. Originally, the vulnerability and its report utilized a vector that had been mitigated through a change in the Microsoft Windows 10 operating systems, however, we received further updates from the reporter in January 2021 to indicate the existence of more vectors and thus exposing the vulnerability. Resolution There is no resolution for this issue at this time.  We acknowledge receiving this vulnerability report and we’re working on it with highest priority. If you do not depend on FlexNet Licensing Service on Windows, there is no further action on your part. If you do, we’re working on a resolution with top priority to give you an update as soon as a mitigation is available. In the meantime, we ask customers and end customers to apply sufficient security measures to protect their applications.  Additional Information No additional information at this time. Related Documents None at this time.  ... View more