Installing the private License server in Windows OS for Axxon One

Installation

To install the private License server in Windows OS, do the following:

1. Contact AxxonSoft technical support to get the License-server_InstallerWix.zip package.
2. Run the License-server.msi file from the received package. The installation is performed in the C:\Program Files\Common Files\VMS\VMS License Server directory.
   Once installed, the following is added:
   
   1. The VMS License Server program is added to Programs and Features.
   2. The VMS_License_Service is added to Services. It starts immediately after the installation. After restarting the server, the service starts automatically. In Task Manager in Processes, the process of the running service is called license_service.exe. After completing the process, a new process starts in one minute.
3. Create an activation request. To do this, you must collect the computer's HIDs using the LS_tool utility by running it in the command line:

   C:\Program Files\Common Files\VMS\VMS License Server>LS_tool.exe --collect-hwinfo

   Attention!

   The key binds to the License server, not to Axxon One. When you use the Guardant key, make sure that the USB key is connected to the server where you install the License server.

4. Add the LEASE_ACCOUNTER_TLS_AUTH_ENABLED system variable with the true value (see Creating system variable).
5. Stop the VMS_License_Service in Services.
6. Send a file with collected HIDs of the computer to the AxxonSoft manager and request the keyfile.zip package for the private License server that contains:

   1. Certificate: ngp.licserver.crt.

   2. Private key: ngp.licserver.key.

   3. Server key: server.license.key.

   4. Client key: license.key.

7. Unpack the keyfile.zip archive received from the AxxonSoft manager.
8. Add the server.license.key to the C:\Program Files\Common Files\VMS\VMS License Server\keys folder.
9. Rename the ngp.licserver.key private key to private.key and the ngp.licserver.crt certificate to keyfile.crt and add them to the C:\Program Files\Common Files\VMS\VMS License Server folder. Confirm the file replacement.
   

   Attention!

   When you use the License server of a version lower than 2.1.1, you must rename the ngp.licserver.key and ngp.licserver.crt files to ls.key and ls.crt, respectively.

10. Start the VMS_License_Service.
11. Stop the VMS_License_Service.
12. In the C:\Program Files\Common Files\VMS\VMS License Server\keys folder, delete the server.license.key. Only the key named as the system ID must remain in the folder.
13. Start the VMS_License_Service.

Installation of the private License server in Windows OS is complete. The License server web interface is available at https://127.0.0.1:444/ (see Logging in to the License server web interface).

Possible issues

Connection error

Axxon One can fail to establish a connection with the License server. This is due to the network-level connection blocking.

In this case, we recommend disabling the firewall on both the Axxon One computer and the License server computer.

Make sure that port 443 isn't occupied by another process.

License server certificate replacement

In some cases, antivirus software can replace the certificate received from the License server (including public certificates), which results in errors in the logs:

~[22384]; 2024-05-28; 10:34:59.557; DEBUG;  /LicenseService/App/: ngp certificate path: C:/ProgramData\ITV\IntellectX\Tickets\ngp.ca
~[22384]; 2024-05-28; 10:34:59.620; ERROR;  /LicenseService/App/: HttpClient: error in performing http request -  err:Peer certificate cannot be authenticated with given CA certificates, method:POST, headers:

In this case, we recommend disabling traffic interception in the antivirus software. As a result, the certificate from the License server is accepted without modifications, allowing the system to function correctly.

License server error: port 8080 is occupied

The following error can appear in the License server logs:

{"app":"LicenseServer","err":"listen tcp :8080: bind: An attempt was made to access a socket in a way forbidden by its access permissions.","level":"error","msg":"exited with error","time":"2022-06-09T09:23:59.471","version":{"PlanKey":"ASIP-LSG","BranchName":"develop","BuildNumber":"69","RevisionNumber":"e89e4088018e47ed982d6f74ed9c4abecde94859"}}

This error indicates that the server cannot use port 8080 due to the operating system-level restrictions.

In this case, we recommend disabling the IIS (Internet Information Services) service. As a result, it frees up port 8080, allowing the License server to function properly.