The following information is provided as a guideline for you to configure your network firewalls so that Enterprise License Manager works. On Center Software does not provide firewall technology nor can we assist with specific setup, configuration, or troubleshooting of your particular network. See Related articles for assistance with Troubleshooting License Manager Activation.
If you check the vendor daemon log for errors are there is no record of a request for a workstation for a license, odds are the workstation was not able to communicate correctly with the server.
There are several places where firewalls or security issues may be preventing Servers and/or Workstations from communicating internally (workstation to server) or externally (server to OCS and workstation to OCS). The list below is not all-inclusive however it should give you an idea of where to look for possible configuration issues:
- Windows Server OS Firewall
- Windows Client Desktop Firewall
- 3rd Party Firewall/Filters Applications local to the Server
- 3rd Party Firewall/Filters Applications local to the Client
- Any Physical Hardware based Network Appliances/VPN/DMZ or Network Filters that can permit/refuse traffic or add latency to the connection.
- Group policies or Security settings that prevent or restrict Internet usage
You must ensure that all Firewalls related to this installation are configured to allow the TCP traffic as described below and in the Related articles. For assistance with configuring your firewalls and network appliances, please contact the vendor, On Center Software is unable to assist with configuring products we do not manufacture or sell.
Firewalls - SERVER
Your server needs to be able to communicate with On Center's licensing servers (over the Internet) and with the workstations attempting to pull a license from the license manager.
To activate product license codes and communicate with other machines on your network, the following programs need to be configured to allow external communication (if you are using 32 bit Windows, remove the " (x86) from the address):
- C:\Program Files\FlexNet Publisher License Server Manager\lmadmin.exe (internal to your network -- even though it runs in a Web browser it doesn't connect to the Internet)
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter.exe (this is On Center's vendor daemon, requires internal network communication)
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter\ocslmtrans.exe (this is On Center's transport utility, requires Internet connectivity)
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter\ServerActivationUtility.exe (the process that sends activation codes to On Center for validation/activation, requires Internet connectivity)
If you receive the following prompt, be sure to select "Allow Access"
For the Enterprise License Manager to activate product license codes, the following programs need to be configured to allow external (Internet) communication (if you are using 32 bit Windows, remove the " (x86)" from the address):
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter\ocslmtrans.exe (transport utility)
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter\ServerActivationUtility.exe (the process that sends activation codes to On Center for validation/activation)
For workstations to retrieve licenses from your local server, these processes need to be able to send and receive communications within your network:
- C:\Program Files (x86)\FlexNet Publisher License Server Manager\lmadmin.exe (license manager - inbound and outbound connections)
- C:\Program Files (x86)\On Center Software\Enterprise License Manager\oncenter.exe (vendor daemon - inbound and outbound connections)
Firewalls - Workstations
Please see Related articles for information on configuring Workstation firewalls
Firewalls - Network
In addition to external (Internet) connections, the server must be able to send/receive communicate to/from the workstations. Internal communication is over two ports:
The first, for the LMAdmin service itself (lmadmin.exe) will be in the range of 27000 through 27009 - if none of those ports is open, or you simply want to use a different port, see Related articles for instructions on specifying the ports that ELM uses.
The second port, for the vendor daemon (oncenter.exe) is randomly assigned by Windows although, again, you can specify a specific port by following the instructions in the Related Article.
The processes "lmadmin.exe" and "oncenter.exe" must be able to communicate with workstations and each other or the workstations will not be able to retrieve licenses.
Now that the FlexNet Publisher License Server (LMAdmin) and Enterprise License Manager Activation Utility are installed and configured the server administrator can start activating product license codes. Be sure to configure Workstation firewalls also, see CLS - Configuring Your Firewall (Classic Products).
Installing the Activation Utility (Enterprise License Manager)