Is it possible to configure a Unix standalone agent package (ndtrack.sh) to work on HTTPS?   When doing a full agent install, there is an mgsft_rollout_cert file that is required to be in the same directory as the install package and mgsft_rollout_response file. After installation, the certs within mgsft_rollout_cert are pinned on the system so it can communicate using HTTPS.   What is required for ndtrack.sh to work using pinned certificates?   Is it as simple as including your mgsft_rollout_cert file in the same dir you have your ndtrack.sh, ndtrack.ini and InventorySettings.xml files?   Or, does it require something additional passed in the command against ndtrack.sh?   Or, is it even possible?   I ask because in the documentation for ndtrack command line I see Preferences for SSLCA and SSLCRL related options, but only under the full UNIX agent install column, NOT for UNIX ndtrack.sh.   If it's possible, could we an example of how it's done?   ... View more

Does anyone have experience working in environments that are running Photon OS ("an open source, minimal Linux container host that is optimized for cloud-native applications, cloud platforms, and VMware infrastructure") they can share as it relates to FNMS Discovery and Inventory for VMware and the FlexNet Inventory Agent running on it? https://vmware.github.io/photon/ ... View more

I'm looking for a consolidated list of areas Flexera FNMS customers would need to be aware of and/or double check based on the LDAP channel binding and LDAP signing requirement updates coming from Microsoft in March. https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirement-for-windows https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023 ... View more

I have a situation where the .actdir.gz files are not being processed by the Application server. They just get placed in the BadLog's folder. Background: File is 48MB 1 Beacon server pulling AD data from 1  DC with multiple trusted domains existing within the forest .actdir.gz file is generated without issue on the Beacon before sending to App server Default IIS Application Settings for /ManageSoftRL of ImportTypesProcessedDirectly includes "activedirectory" (so files coming from the Beacon server are immediately processed) Registry entry within \ManageSoft Corp\ManageSoft\Compliance\CurrentVersion of CommandTimeout REG_SZ 259200 was added (increasing timeout value to 72 hours or 3 days) This was added a while ago and fixed a Database timeout issue .actdir.gz files end up in \ProgramData\Flexera Software\Incoming\ActiveDirectory\BadLogs\failure I've manually processed failed .actdir.gz files running \Flexera Software\FlexNet Manager Platform\Importers\bin\mgsimport.exe -t activedirectory generating a log Log errors include: SQL EXCEPTION: -------------------- System.Data.SqlClient.SqlException (0x80131904): Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding. The wait operation timed out - Unexpected exception in importer There are no "CNF records" within the .actdir .xml, but there are Computer CN's that have the letters "CNF" within it's legitimate Name, but not in any ObjectGUID's or ObjectSid's I've copied one of the .actdir.gz files and processed within an local VM version of FNMS and was able to process it No antivirus software is preventing the file from being processed according to AV logs No duplicate processes for ActiveDirectory import (I've disabled the scheduled task altogether)   Thanks for reading. I appreciate any other thoughts or things to try. ... View more

Pretty self explanatory. I have my assumptions but am looking for a definitive answer. Is there a way to create a user account in FNMS that is not tied to a Windows domain? Use case is an organization has subsidiaries that are not a part of their domain and need to keep them separate, but someone from that organization needs access to the parent companies' on prem FNMS instance. Their NAT allows the user to get to the to the FNMS Web UI, but they don't want to create an account for the user on the parent company domain. ... View more

I'm working in a customer environment experiencing an issue I haven't before and haven't been able to pinpoint why it's happening. Synopsis: Customer environment very locked down so worked closely with firewall team to open up everything required based on Flexera's documentation (firewall audit logs show nothing being dropped) External Firewall rules created based on https://helpnet.flexerasoftware.com/fnms/EN/WebHelp/index.html#topics/FIB-PortsAndURLs.html https://helpnet.flexerasoftware.com/fnms/EN/WebHelp/index.html#reference/FIB-URLs.html TLS 1.1 and 1.2 Client/Server enabled and SSL 2.0 disabled by default, use strong crypto turned on, (standard beacon settings based on Flexera KB https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/Transport-Layer-Security-TLS-1-1-1-2-Configuration/ta-p/2250  When CheckCertificateRevocation=True, all files collected on the Beacon servers will not be transmitted to the FNMS Cloud. (assuming because the check against CRL is not happening so file transmission is being denied) When CheckCertificateRevocation=False, all pending files collected are transmitted. I have not experienced this issue with any other customer to date. All are using the default configuration of CheckCertificateRevocation=True with no issues. My question is, what is happening with =True vs =False that is causing files from the Beacon server to not send to the FNMS Cloud, and what needs to happen for =True to work as expected? upload.log states the following: Error 0x80092012: The revocation function was unable to check revocation for the certificate. Error 0xE050044D: Failed to create remote directory /ManageSoftRL Error 0xE0690099: Specified remote directory is invalid, or could not be created ERROR: Remote directory is invalid Upload failed due to a server side issue.  This server may be retried during this upload session. Ignoring failover locations for upload on an inventory beacon WARNING: FlexNet Manager Platform has failed to upload a file to all configured upload servers; aborting attempt to upload these file(s) I'm at a loss as Firewall logs show nothing being blocked or dropped. ... View more