I've read through https://docs.flexera.com/flexera/EN/ITAssets/InvSet-OrclFusnMdlwrScan.htm and have checked the box for Enable collection of Oracle Fusion Middleware audit data. I've enabled Include Oracle Fusion Middleware checkbox to make audit data available on demand.   I've verified in my BeaconPolicy.xml has CTrackerPerformOracleFMWScan set to True, for osx, unix, windows. I've verified I am licensed for Oracle.   In the document linked above, it states that for collecting Fusion Middleware, you can use the FlexNet inventory agent installed locally and zero footprint. My question is, since it states zero footprint will work, would a "lite" agent work as well? I'd copy ndtrack.sh, ndtrack.ini, and InventorySettings.xml to the same directory (say, /var/flexera/liteagent/), make ndtrack.sh executable, and manually run the command ./ndtrack.sh -t machine -o MachineInventoryDirectory=/var/flexera/liteagent/results –o LogFile=/var/flexera/liteagent/results/tracker.log.   Being that the BeaconPolicy.xml shows OracleFMW scanning is enabled, my assumption is the scripts necessary to collect Oracle Fusion Middleware would be run when I execute my scan against ndtrack.sh, because I've included InventorySettings.xml with my executable.   Is this correct? I'm basically looking to verify that a "lite" agent can collect OracleFMW even if it's not explicitly called out in the documentation. ... View more

Please verify this is correct and feel free to promote this to a KB if so.   Scenario: You are utilizing certificates with your FlexNet Manager Suite implementation and encrypting the traffic between your deployed FlexNet Inventory Agents and your FlexNet Beacon servers (traffic over port 443). When the issued certificate expires, the pinned certificate you included in your FlexNet Inventory Agent deployment package to Linux/Unix systems  (mgsft_rollout_cert) needs to be updated on every Linux/Unix system (there is no self updating mechanism).   Update Method #1 Update your mgsft_rollout_cert certificate file with the updated certificate Base64 export (if purchasing external Certificate Authority certs, include the Trusted Root and Intermediate certificates). Reinstall the agent including the updated certificate file mgsft_rollout_cert. Update Method #2 Update your mgsft_rollout_cert certificate file with the updated certificate Base64 export(if purchasing external Certificate Authority certs, include the Trusted Root and Intermediate certificates). Make a copy of it and rename it cert.pem. On each Linux/Unix system, replace /var/opt/managesoft/etc/ssl/cert.pem with the updated cert.pem.   I wanted to make sure this got on the forum in case others were looking for a way to update FlexNet Inventory Agent certificates without a complete agent reinstall. ... View more

Is it possible to configure a Unix standalone agent package (ndtrack.sh) to work on HTTPS?   When doing a full agent install, there is an mgsft_rollout_cert file that is required to be in the same directory as the install package and mgsft_rollout_response file. After installation, the certs within mgsft_rollout_cert are pinned on the system so it can communicate using HTTPS.   What is required for ndtrack.sh to work using pinned certificates?   Is it as simple as including your mgsft_rollout_cert file in the same dir you have your ndtrack.sh, ndtrack.ini and InventorySettings.xml files?   Or, does it require something additional passed in the command against ndtrack.sh?   Or, is it even possible?   I ask because in the documentation for ndtrack command line I see Preferences for SSLCA and SSLCRL related options, but only under the full UNIX agent install column, NOT for UNIX ndtrack.sh.   If it's possible, could we an example of how it's done?   ... View more

Does anyone have experience working in environments that are running Photon OS ("an open source, minimal Linux container host that is optimized for cloud-native applications, cloud platforms, and VMware infrastructure") they can share as it relates to FNMS Discovery and Inventory for VMware and the FlexNet Inventory Agent running on it? https://vmware.github.io/photon/ ... View more

I'm looking for a consolidated list of areas Flexera FNMS customers would need to be aware of and/or double check based on the LDAP channel binding and LDAP signing requirement updates coming from Microsoft in March. https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirement-for-windows https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023 ... View more

I have a situation where the .actdir.gz files are not being processed by the Application server. They just get placed in the BadLog's folder. Background: File is 48MB 1 Beacon server pulling AD data from 1  DC with multiple trusted domains existing within the forest .actdir.gz file is generated without issue on the Beacon before sending to App server Default IIS Application Settings for /ManageSoftRL of ImportTypesProcessedDirectly includes "activedirectory" (so files coming from the Beacon server are immediately processed) Registry entry within \ManageSoft Corp\ManageSoft\Compliance\CurrentVersion of CommandTimeout REG_SZ 259200 was added (increasing timeout value to 72 hours or 3 days) This was added a while ago and fixed a Database timeout issue .actdir.gz files end up in \ProgramData\Flexera Software\Incoming\ActiveDirectory\BadLogs\failure I've manually processed failed .actdir.gz files running \Flexera Software\FlexNet Manager Platform\Importers\bin\mgsimport.exe -t activedirectory generating a log Log errors include: SQL EXCEPTION: -------------------- System.Data.SqlClient.SqlException (0x80131904): Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding. The wait operation timed out - Unexpected exception in importer There are no "CNF records" within the .actdir .xml, but there are Computer CN's that have the letters "CNF" within it's legitimate Name, but not in any ObjectGUID's or ObjectSid's I've copied one of the .actdir.gz files and processed within an local VM version of FNMS and was able to process it No antivirus software is preventing the file from being processed according to AV logs No duplicate processes for ActiveDirectory import (I've disabled the scheduled task altogether)   Thanks for reading. I appreciate any other thoughts or things to try. ... View more

Pretty self explanatory. I have my assumptions but am looking for a definitive answer. Is there a way to create a user account in FNMS that is not tied to a Windows domain? Use case is an organization has subsidiaries that are not a part of their domain and need to keep them separate, but someone from that organization needs access to the parent companies' on prem FNMS instance. Their NAT allows the user to get to the to the FNMS Web UI, but they don't want to create an account for the user on the parent company domain. ... View more