Manage Pentaho licenses

Before you begin

Procedure

1. Download the local license server file enterprise-local-license-server<build_version>.tar.gz to the Ubuntu server.

2. Set the necessary permissions to open the downloaded file using the following command:

   chmod 777 enterprise-local-license-server<build_version>.tar.gz

3. Open the download package using the following command:

   tar -xvzf enterprise-local-license-server<build_version>.tar.gz -C <destination_folder>

4. Navigate to the folder where the installation file is located using the following command:

   cd /<destination_folder>/enterprise-local-license-server/server

5. Run the license server executable using the following command:

   sudo ./install-systemd.sh

6. Change passwords after deploying the server using the following command:

   flexnetlsadmin -server <licenseServer_baseURL> -authorize <defaultAdminName> {<defaultAdminPassword>|-<passwordConsoleInput>} -users -edit admin {<newAdminPassword>!|-<passwordConsoleInput>}

   Default admin user account information is included in the producer-settings.xml file:

   • Default username: admin
   • Default password: Password!01
   For more information, see FNE_LicenseServerAdminGuide.pdf in the /enterprise-local-license-server/documentation folder.

7. Start the local license server using the following command:

   sudo systemctl start flexnetls-pentaho

8. Perform a systemd status check to see if the Flex Net service is running using the following command:

   sudo systemctl -l status flexnetls-pentaho

9. If the system status check shows that it is running, check the status of the Flex Net server using the following command:

   ./flexnetlsadmin.sh -authorize admin <password> -server <http://<server_ip_address>:7070/api/1.0/instances/~> -status

10. Activate and populate the pool of licenses on the server using the activation ID mailed to you by Hitachi Vantara using one of the following methods:

    • Online activation:

      ./flexnetlsadmin.sh -authorize <admin_name> <password> -server <licenseServer_baseURL> -activate -id <activation_id> -count <no_of_entitlements_you_want_to_activate>

    • Offline activation: See Activate offline entitlements for a local license server.

11. Check which licenses have been activated using the following command:

    ./flexnetlsadmin.sh -authorize admin <password> -server <http://<server_ip_address>:7070/api/1.0/instances/~> -licenses -verbose

Parent Topic

• Install and manage a local license server

Before you begin

Procedure

1. Download the local license server file enterprise-local-license-server<build_version>.zip to the Windows server.

2. Open the downloaded zip file using the following command:

   unzip enterprise-local-license-server<build_version>.zip

   The installation files are extracted to <installation_path>\enterprise-local-license-server-<version>.

3. Navigate to directory you extracted the files to and execute the following install batch file:

   install.bat

4. Review and accept the terms of the license agreement.

   The directory enterprise-local-license-server is created.

5. Navigate to <installation_path>\enterprise-local-license-server\server (or the folder containing the files flexnetls.jar and flexnetls.bat in the license server installation).

6. In the same directory, run the following command to install the license server as a service:

   flexnetls.bat -install

7. After deploying the server, change the passwords by running the following command in the <installation_path>\enterprise-local-license-server\enterprise folder:

   flexnetlsadmin -server http://<localhostName>:7070/api/1.0/instances/~ -authorize admin <old_password> -users -edit admin <new_password>

   Default admin user account information is included in the file producer-settings.xml:

   • Default username: admin
   • Default password: Password!01
   For more information, see FNE_LicenseServerAdminGuide.pdf in the /enterprise-local-license-server/documentation folder.

8. Start the local license server using the following command:

   flexnetls.bat -start

9. Check the status of the license server using the following command:

   flexnetls.bat -status

   If the server is running, it reports the status Service running.

10. Open the Windows Services application by running the command services.msc at the Windows command line and verify that the service FlexNet License Server - <admin_name> has started.

    To stop the service, run flexnetls.bat -stop.

11. Using the following command, activate and populate the pool of licenses on the server using the activation ID mailed to you by Hitachi Vantara:

    flexnetlsadmin.bat -authorize <admin_name> <password> -server <licenseServer_baseURL> -activate -id <activation_id> -count <no_of_entitlements_you_want_to_activate>

    where <licenseServer_baseURL> is

    http://<localhostName>:7070/api/1.0/instances/~

12. Check which licenses have been activated using the following command:

    flexnetlsadmin.bat -authorize admin <password> -server <licenseServer_baseURL> -licenses -verbose

13. Check the status of the server using the following command:

    flexnetlsadmin.bat -authorize admin <password> -server <licenseServer_baseURL> -status

Parent Topic

• Install and manage a local license server

-authorize admin <password>

Parent Topic

• Install and manage a local license server

Before you begin

Procedure

1. Navigate to the following folder:

   cd /usr/lib/jvm/<java_installation_folder>/lib/security

   Example: /usr/lib/jvm/java-1.11.0-openjdk-amd64/lib/security

2. Generate the self-signed SSL certificate by running the following command:

   sudo keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -storepass changeit -validity 3600 -ext san=ip:<ip_address>,ip:<local_host>

3. Export the generated certificate to file using the following command:

   sudo keytool -export -alias selfsigned -keystore keystore.jks -rfc -file server_cert.certs

4. Import the file into the keystore using the following command:

   sudo keytool -import -trustcacerts -keystore /usr/lib/jvm/java-1.11.0-openjdk-amd64/lib/security/cacerts -storepass changeit -alias selfsigned -file server_cert.cert

5. Update local-setting.xml as follows:

   # HTTPS server mode
   https-in:
     # Set to true to enable
     enabled: false
     # HTTPS listening port
     port: 1443
     # Path to keystore
     keystore-path: <path-to-your-keystore>
     # Keystore password. You can obfuscate this with java -jar flexnetls.jar -password <your-password>
     keystore-password: changeit
   
     # Choice of TLS cipher suites. One of MODERN, COMPATIBLE or WEAK.
     tlsCipherSuites: COMPATIBLE
   
   # HTTPS client mode. You generally don't need to specify this, unless you have an in-house CA chain.
   https-out:
     # Set to true to enable
     enabled: false
     # Path to truststore containing server certificate.
     truststore-path: <path-to-your-truststore>
     # Truststore password. You can obfuscate this with java -jar flexnetls.jar -password <your-password>
     truststore-password: changeit
     # Switch off if you're having host validation problems (not recommended)
     host-verify: true
     # Set to true if you're using self-signed certificates (not recommended)
     self-signed: false

Results

Parent Topic

• Install and manage a local license server

Procedure

1. Obtain the activation ID from the sales support team.

2. Create a request file (capabilityRequest.bin) to activate granted entitlements by executing the following command on your local license server:

   cd /<destination_folder>/enterprise-local-license-server/enterprise
   
   # Linux:
   ./flexnetlsadmin.sh -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -id <activation_id> -count <no_of_entitlements_you_want_to_activate> -o capabilityRequest.bin 
   
   # Windows:
   ./flexnetlsadmin.bat -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -id <activation_id> -count <no_of_entitlements_you_want_to_activate> -o capabilityRequest.bin

   A capabilityRequest.bin file is generated in the directory where you ran the command.

3. Send the capabilityRequest.bin file to Pentaho customer support.

   Customer support generates a capabilityResponse.bin file and sends it to you.

4. Load the capabilityResponse.bin file to the local license server using the following command:

   Linux:

   ./flexnetlsadmin.sh -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password\!01 -activate -load capabilityResponse.bin

   Windows:

   ./flexnetlsadmin.bat -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password\!01 -activate -load capabilityResponse.bin

5. Check which licenses have been activated using the following command:

   ./flexnetlsadmin.sh -authorize admin <password> -server <http://<server_ip_address>:7070/api/1.0/instances/~> -licenses -verbose

Results

Parent Topic

• Install and manage a local license server

Procedure

1. Shut down the flexnetls-pentaho service using the following command:

   sudo systemctl stop flexnetls-pentaho

2. Prevent the service from starting automatically when rebooting the system using the following command:

   sudo systemctl disable flexnetls-pentaho

3. Remove the following files that are associated with the service:

   sudo rm /etc/systemd/system/flexnetls-pentaho.service
   sudo rm -r /etc/systemd/system/flexnetls-pentaho.service.d
   

4. (Optional) If you are planning to do a clean re-install, remove the following files as well:

   File location	Command
   Trusted storage files in /var/opts/flexnetls/producer_name (.ks, .db, and .0 files)	rm -rf /var/opts/flexnetls/pentaho
   Log files in /var/opts/flexnetls/producer_nama/logs	rm -rf /opt/flexnetls/pentaho

Parent Topic

• Install and manage a local license server

Procedure

1. Shut down the flexnetls-pentaho service using the following command:

   flexnetls.bat -stop

2. Uninstall the license server service using the following command:

   flexnetls.bat -uninstall

3. To properly clean up your environment, run the following command:

   sc delete FNLS-pentaho

4. Delete the files in the license server’s installation directory.

5. (Optional) If you are planning to do a clean re-install, remove the following files as well:

   Files	Default file location
   Trusted storage files	C:\Windows\ServiceProfiles\NetworkService\flexnetls\pentaho (.ks, .db, and .0 files)
   Log files	C:\Windows\ServiceProfiles\NetworkService\flexnetls\pentaho\logs

   Note

   Trusted storage and log file locations are defined by the license server policies server.trustedStorageDir and logging.directory, respectively, the defaults for which are based on ${bases.dir}. Depending on the values set for these policies on your server, your trusted storage and log files might be in different locations than those mentioned in this step.

Parent Topic

• Install and manage a local license server

To ensure that the Pentaho Server uses the same location to store and retrieve your Pentaho licenses, you must create a PENTAHO_LICENSE_INFORMATION_PATH system environment variable for your Pentaho user account if it does not exist. It does not matter what location you choose; however, the location needs to be available to the user account(s) that run the Pentaho Server.

Parent Topic

• Manage licenses using the command line interface

Child Topics

• Set the license path environment variable on Linux
• Set the license path environment variable on Windows

Procedure

1. Navigate to the /license-installer/ directory where the Pentaho PDI tool is installed (the license-installer subfolder).

2. Run the license installation script as follows to see examples of how to use it:

   • Linux:

     install_license.sh --help

   • MacOS:

     install_license.sh --help

   • Windows:

     install_license.bat --help

Parent Topic

• Manage licenses using the command line interface