Skip to main content
V
VeqTor1-Visitor
1-Visitor
May 10, 2021
Question

Alternative ways to access the PTC License Server

  • May 10, 2021
  • 4 replies
  • 22597 views

Hello Forum,

 

Our company runs a PTC License Server that is accessible via the company network. A number of "concurrent licenses" are managed and made available to employees via this License Server.

 

However, we'd like to use Creo on a certain workstation that is not allowed to access the company's network (i.e. join the company's domain) due to security reasons. Hence, we are looking for alternative ways to access the License Server to retrieve one of the company's licenses without connecting the workstation to the company domain.

 

For example, could a copy of the License Server be installed directly on the workstation -- and how would we have to go about this?

4 replies

KenFarley
KenFarley21-Topaz II
21-Topaz II
May 10, 2021

I don't think you're going to be able to do this kind of thing, but maybe I'm wrong. There is a "borrow" license method available, but it still requires a person to be connected to the network to tell the license server that they are borrowing a license.

If it's only a temporary thing, or maybe if it's not, perhaps the best option would be to just get a new license for that one computer. Licenses are just subscriptions so you could pay for a year or as long as you need this independent operator to work for you. Once the job is done, you end the license.

    V
    VeqTor1-VisitorAuthor
    1-Visitor
    May 10, 2021

    Hello and thank you for your answer.


    Wouldn't it be possible that several license servers query the licenses via Flexnet directly over the Internet -- including a single-machine server installed on the workstation in question?

    KenFarley
    KenFarley21-Topaz II
    21-Topaz II
    May 10, 2021

    In olden times, we used to do this. I could run Pro/E at home and do analyses and other such stuff that I didn't need the network servers for. These days, though, the IT folk and system operators are absolutely forbidding having such an "open door" to the server. To use Creo elsewhere (like quarantined folk are) is via a VPN where you are still logged into the network, etc. Also forced two-factor authentication via additional software/hardware. That's why I didn't suggest this method, 'cause it's probably not allowed wherever you work.

      B
      23-Emerald III
      BenLoosli23-Emerald III
      23-Emerald III
      May 10, 2021

      I would think the best way would be to transfer one of your licenses from the pool to that one workstation. That would make it its own license server and never need to connect to your network.

       

      V
      VeqTor1-VisitorAuthor
      1-Visitor
      May 10, 2021

      Yes, but unfortunately the company does not accept this solution.

       

      Probably that's because all licenses they have are of the concurrent type, and if one is assigned to the workstation in question, other employees will not be able to use this license while it is not used on that workstation (about 80% of the time).

      D
      dnordin16-Pearl
      16-Pearl
      May 10, 2021

      If the license is for a single PC, you can purchase a node-locked license for just that PC. Node-locked licenses are typically cheaper than floating licenses, but it is an expense that is to be expected if you wish to work with off network hardware.

       

      Another option is to constantly move a single license to the standalone PC every time it is used, and then move it back when it is not in use. This is definitely inconvenient, and difficult to maintain compliance to the license agreement (and it is a potential red flag to PTC).

       

      Yet another option is to examine the use of "forest" domains (my terminology may be incorrect). Our network group researched this option, but it was never tested or implemented. The technique involved multiple separate lower level domains that could communicate with a top level domain, but could not communicate across the lower levels. If the license server is established in the top level domain, then, in theory, all the independent lower level domains could access the same license server while maintaining separation from the other domains. This may not be an option if you truly cannot connect the single PC to any network.

       

      Regards,

      Dan N.

        T
        23-Emerald IV
        TomU23-Emerald IV
        23-Emerald IV
        May 10, 2021
        @VeqTor wrote:

        ... we'd like to use Creo on a certain workstation that is not allowed to access the company's network (i.e. join the company's domain) due to security reasons. Hence, we are looking for alternative ways to access the License Server to retrieve one of the company's licenses without connecting the workstation to the company domain.

        You need to clarify if this computer is not allowed to access the network or not allowed to join the domain.  The license server does not required domain access, just TCP/IP access to a couple of specific ports.  If this computer is not allowed to access the network at all, then the license server has to be moved outside of the domain network to someplace this other computer is allowed to access, or you need to move one of the licenses to this special computer and only use it there.

          V
          VeqTor1-VisitorAuthor
          1-Visitor
          May 10, 2021

          Thank you, it's becoming more clear to me now. 

           

          The company offers Cisco AnyConnect VPN for their employees to login to the network (e.g. from home)

           

          However, they wouldn't currently allow AnyConnect to be installed on the workstation in question, probably because that would allow full access to the company's domain by default.
           
          Do you think it would be easy for the company's IP admins to restrict AnyConnect client to only access the license server and nothing else?
           
          vecTor_1-1620656506808.png

           

          D
          dnordin16-Pearl
          16-Pearl
          May 10, 2021

          Yes, it is possible to restrict the network access.  Is it simple is a question for your network folks.  At a minimum, you'd still need access to "login" servers to authenticate your credentials in addition to access to the license server.

           

          Is the PC your home PC by chance? If so, you may wish to check the licenses associated with your PTC sales order number. With some of the PTC Creo bundles, you are entitled to the Creo Essentials Home Use license which is a node-locked license you can use on your home PC. The files are compatible with the commercial license. You can review the PTC license agreement regarding the home use license restrictions. Please be aware the home use license doesn't include advanced features.  You can transfer files via an external, encrypted, drive easily enough.

           

          Regards,

           

          Dan N.

          Terms & ConditionsAccessibility statement