Setting up a Network Key
This article covers the following topics relating to the installation, configuration, and management of a SuperPro type FRED Network License:
- License Server Setup
- Client Setup
- Optional Client Computer Parameters
- Server Dongle Authorization Update
- Sentinel License Monitor
- License Log
License Server Setup
FRED Optical Engineering Software uses USB Super-Pro key dongles provided by Thales to implement its software license protection strategy. The license server computer only needs to have the Sentinel Protection Server installed and is not required to have a full installation of the FRED Optical Engineering Software. The following steps should be taken to install or update the network license services:
1. Retrieve the most recent version of the Sentinel Protection Installer executable, which is used to install the Sentinel Protection Server. The executable can be retrieved from one of the following locations:
a. Locally hosted installer: Sentinel-Protection-Installer.exe
c. Download from the Thales website
2. When prompted, install both the Sentinel System Drivers and the Sentinel Protection Server. The system drivers control the hardware key and the protection server manages the network licenses.
3. Verify that the Sentinel Protection Server service is running by viewing the Services tab of the Windows Task Manager (see image below) or by opening the Windows Control Panel and navigating to Administrative Tools > Services.
4. Verify that port UDP 6001 (for TCP/IP) is open for network communication. This can be done by opening up a command window with administrative privileges and typing, "netstat -ab". After allowing the command to fully execute, check the output for [spnsvnt.exe] running on UDP port 6001.
The procedure below should be followed to set up a client computer for use with a SuperPro network key. If you do not have an up to date FRED installation or have not received a download link to the current release version, please email FRED Technical Support at email@example.com for more information.
1. Install FRED Optical Engineering Software. None of the optional installation components are required on the client computer.
2. Add a new Windows System environment variable by opening the control panel and selecting the System group option. In the resulting dialog, select Advanced System Settings (requires Administrative Privileges). Press the Environment Variables button in the resulting System Properties dialog to access the system environment variables list. Use the "New" option to create a new System environment variable.
a. The System environment variable should have the name, NSP_HOST
b. The value of the environment variable should be specified as one of the following options (server name or IP address recommended):
|Environment Variable Value||Description|
|server name, IP address, or IPx address|| This is the fastest and most efficient access mode for locating the server. This value allows a maximum of 63 characters. Designating the server name is the most reliable since the IP address can change in some cases.
|RNBO_SPN_BROADCAST||Broadcasts a request over the local subnet to find a server with an available license.|
|RNBO_SPN_LOCAL||Looks for a hardware key on the local computer (standalone mode using a local server).|
|RNBO_SPN_DRIVER||Looks for a hardware key on the local computer (standalone mode without a local server).|
|RNBO_SPN_SERVER_MODES||Tries RNBO_SPN_LOCAL followed by RNBO_SPN_BROADCAST.|
Once FRED is installed and the NSP_HOST environment variable is setup, no further steps are required. FRED can be started on the client computer and a license will be acquired from the server if a license is available.
Optional Client Computer Parameters
A set of additional parameters can be applied to the client computer that will govern how the client searches for a network key. With the exception of the NSP_HOST_CONFIG option (see below), the parameters must be used IN ADDITION to the NSP_HOST environment variable. The optional parameters can be specified by either additional environment variables or by startup parameters on the FRED desktop icon.
Example XML configuration file: sntlconfig.xml
Specifying License Search by Environment Variables
Environment variables can be set in Windows by going to Control Panel > System > Advanced: Environment Variables. At a minimum, the NSP_HOST variable must be set. Then, additional environment variables or startup parameters can be specified to provide further control over license access. The following optional environment variables can be specified to refine the network license search:
|System Environment Variable||Variable Value||Description|
|NSP_HOSTKEYSERNUM||Key serial number in decimal form (ex. "1B2" in hex = 2*160 + 11*161 + 1*162 = 434)||Designates a specific SuperPro key on the license server from which a license must be acquired. This option requires that the designated key serial number is known. This environment variable takes precedence over the NSP_HOSTKEYTYPE variable.|
|NSP_HOSTKEYTYPE||standard, optimum, or mpc||Specifies the FRED license type that must be acquired (FRED, FRED Optimum, or FREDmpc)|
Specifying License Search by FRED Startup Parameters
Rather than designating a specific hardware key by serial number using NSP_HOSTKEYSERNUM or a specific version type using NSP_HOSTKEYTYPE, these settings can be issued as FRED startup parameters. The value for /HostKeySerNum is the decimal representation of the target key's serial number. The value for /HostKeyType is either "mpc", "optimum" or "standard".
|fred.exe /HostKeySerNum=256||A license is acquired from a SuperPro key with serial number 256 (in decimal), or no license is acquired.|
|fred.exe /HostKeyType=optimum||A license of FRED Optimum is acquired, or no license is acquired.|
NOTE: No spaces are allowed in the entry of the startup parameters.
These startup parameters can be issued at the command line or by editing the FRED startup desktop icon "Target" entry (ex. "C:\Program Files\FRED\Bin\Fred.exe" /HostKeyType=optimum).
Server Dongle Authorization Update
Updating the license authorization codes for a network key can be performed from any client computer connected to the server within FRED. This procedure only needs to be performed one time and the key will be updated for all clients. The procedure for updating a network license is as follows:
1. Start FRED on a client computer that can acquire a network license from the key being updated. If more than one FRED SuperPro dongle is hosted on the license server, use the environment variable or startup parameter options described previously to force the client to acquire a license from the specific key being updated.
2. In FRED, open the license authorization dialog by navigating to Help > License Authorization. (note that if the FRED license is expired, this dialog will open automatically upon starting FRED)
3. Enter the license authorization code strings into the dialog box and press "Authorize Key".
4. A dialog box will be presented indicating the success or failure of the license update. The FRED License Status information at the top of the dialog should update to display the new authorization codes.
Sentinel License Monitor
With the Sentinel license server software installed, a license monitor running as a JAVA applet is available through a web browser interface. The license monitor can be viewed by opening a web browser and entering the address: http://localhost:6002. Note that many web browsers and security policies will block this applet from running, but Internet Explorer has been found to be most flexible in permitting access to the license monitor.
The "loadserv.exe" utility located in the ..\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\ folder can be used to specify log files for usage and errors. The following steps should be taken to setup logging for a network license:
1. Run loadserv.exe
2. In the Server and Command line option section, click Configure.
3. Select the "..." browse button in the Usage Log File section and designate a *.log file for collecting license usage information (typically in the same folder as the utility).
4. Select the "..." browse button in the Error Log File section and designate a *.log file for collecting license error information (typically in the same folder as the utility).
5. Click OK on the Server Options dialog.
6. Click Quit on the Sentinel Protection Service Loader dialog.
7. Restart the Sentinel Services from the Control Panel.