grid-license-server-user-guide
grid-license-server-user-guide
Version 2021.07
User Guide
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | iii
4.9.5. Sample Business Scenario for Virtual Groups............................................................... 74
Chapter 5. Managing Licenses on your Local NVIDIA vGPU Software License Server.... 76
5.1. Installing a License.................................................................................................................76
5.2. Verifying High Availability Setup of the License Server........................................................ 78
5.3. Viewing Information About Installed Licenses...................................................................... 79
5.3.1. Viewing the Properties of All Installed Licensed Features............................................ 79
5.3.2. Viewing the Details of a Single Licensed Feature.......................................................... 80
5.3.3. Viewing Information About All Borrowed Licenses........................................................ 81
5.3.4. Viewing the Details of a Single Licensed Client............................................................. 82
5.3.5. About the License Borrow Period................................................................................... 82
5.4. Reserving Licenses................................................................................................................. 83
5.4.1. Creating License Reservations........................................................................................ 83
5.4.2. Deleting License Reservations........................................................................................ 86
5.4.3. Exporting and Importing License Reservations..............................................................87
5.5. Converting an Evaluation License Server to a Permanent License Server..........................88
Chapter 6. Troubleshooting the NVIDIA vGPU Software License Server.......................... 89
6.1. Obtaining Diagnostic Information from the License Server Log Files................................. 89
6.1.1. Log File Locations and Types.......................................................................................... 89
6.1.2. Changing the License Server Log Level......................................................................... 90
6.1.3. Setting the Time Zone of Log File Time Stamps............................................................ 91
6.2. Management Interface Connection Errors............................................................................ 92
6.3. License Server Connection Errors.........................................................................................93
6.4. License Upload Failures.........................................................................................................94
6.4.1. License Response Fails Trust Criteria............................................................................94
6.4.2. Capability Response Rejected - Response Time Too Old...............................................94
6.4.3. Capability Response Rejected – Update Time Invalid.................................................... 94
6.4.4. Capability Response Rejected - Response Enterprise ID Does Not Match the Server
...94
6.5. Trusted Storage Database Errors..........................................................................................95
6.5.1. Restoring the Trusted Storage Database from a Backup.............................................. 95
6.5.1.1. Restoring the Trusted Storage Database from a Backup on Windows................... 95
6.5.1.2. Restoring the Trusted Storage Database from a Backup on Linux.........................96
6.5.2. Deleting the Trusted Storage Database..........................................................................96
6.5.2.1. Deleting the Trusted Storage Database on Windows.............................................. 96
6.5.2.2. Deleting the Trusted Storage Database on Linux.................................................... 97
6.6. Issues when the License Server Is Used with Security Software.........................................97
6.7. FEATURE_NOT_STARTED Failure to Handle a License Request.........................................98
6.8. License Server Failures after Installation, Upgrade, or Migration of the JRE on Windows
.. 98
6.8.1. The JAVA_HOME System Variable Was Set Incorrectly................................................. 98
Figure 15. License Server Settings for Enabling Failover Support ................................................34
Figure 16. License Server Settings for Setting the Connection Protocol ......................................45
Figure 29. Apache Tomcat Status in the Windows Services Application ......................................92
Figure 31. License Server Status in the Windows Services Application ........................................93
Figure 32. Starting the Uninstaller from Windows Control Panel ............................................... 105
Figure 33. Running the License Server Uninstaller on Windows ................................................ 106
Figure 34. Running the License Server Uninstaller on Linux ...................................................... 107
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | vii
List of Tables
Table 1. Licensed Feature Properties ............................................................................................. 80
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | viii
Chapter 1. Introduction to the NVIDIA
vGPU Software License
Server
The NVIDIA vGPU software License Server is used to serve a pool of floating licenses to NVIDIA
vGPU software licensed products. The license server is designed to be installed at a location
that is accessible from a customer’s network, and be configured with licenses obtained from
the NVIDIA Licensing Portal.
The licenses served by the NVIDIA vGPU software license server are obtained from the NVIDIA
Licensing Portal as downloadable license files, and installed into the license server through its
management interface.
‣ A primary license server, which is actively serving licenses to NVIDIA vGPU software clients
‣ A secondary license server, which acts as a backup for the primary license server
Configuring two servers in a failover configuration increases availability because simultaneous
failure of two servers is rare. The primary and secondary license servers work together to
ensure that licenses in the enterprise remain continually available to NVIDIA vGPU software
clients.
If the primary license server fails, failover occurs and the secondary server can continue to
serve licenses for up to the license server maintenance interval, which is seven days.
Note: To ensure that licenses in the enterprise remain continually available after failure of the
primary license server, return the primary server to service within seven days of the failure.
Furthermore, the remaining server becomes a single point of failure. Therefore, you should
return the failed server to service as quickly as possible to restore high availability support for
the license server.
During normal operation, the primary license server periodically updates the secondary
server with information about the licenses that are being served to clients. However, when the
primary server is returned to service after a failure, it is not updated with information from the
secondary server about licenses that were served while the primary server was out of service.
For more information about configuring the license server for high availability, see High
Availability Requirements.
Note: If you are configuring the license server for high availability, you must perform some
tasks for both the primary license server and the secondary license server. For more
information, see High Availability Requirements.
Task Instructions
Get your NVIDIA vGPU software and NVIDIA vGPU Virtual GPU Software Quick Start Guide
software License Server software.
Install the NVIDIA vGPU software License Server Installing and Configuring the NVIDIA vGPU
software. Software License Server
Access the management interface of the license Accessing the License Server Management
server. Interface
Get the MAC address of the license server. Obtaining the License Server’s MAC Address
HA license servers only: Enable failover support. Enabling Failover Support on the Primary and
Secondary License Servers
Register your license server, generate licenses, Managing Entitlements, Licenses, and Contacts
and download license files. on the NVIDIA Licensing Portal
Install a license. Installing a License
View available licenses. Viewing Information About Installed Licenses
Reserve and release licenses. Reserving Licenses
Move a license to a new server. 1. Removing Licensed Products from a License
Server
2. Adding Licensed Products to a License Server
Task Instructions
Uninstall the license server software. Uninstalling the NVIDIA vGPU Software License
Server
You can install the NVIDIA vGPU software license server on Windows and Linux systems that
meet the license server’s platform requirements. If you require high availability for the license
server, you must install the license server both on the system that you will use as the primary
license server and on the system that you will use as the secondary license server.
The license server requires a Java runtime environment and an Apache Tomcat server. Before
you install the license server software, ensure that the required software is already installed
on each license server host machine that you are using:
‣ On Windows, you need ensure only that the Java runtime environment is installed. The
Apache Tomcat server is included in the license server installer for Windows.
‣ On Linux, you must ensure that both the Java runtime environment and the Apache
Tomcat server are installed.
Also ensure that you have obtained your NVIDIA vGPU software and NVIDIA vGPU software
License Server software. For more information, refer to Virtual GPU Software Quick Start Guide.
Note: Before proceeding with the installation, refer to Virtual GPU License Server Release Notes
for details of supported operating systems and known issues.
Note: If you choose to open port 8080 during license server installation, or at any time
afterwards, the license server’s management interface is unprotected.
‣ Both servers must run the same version of the NVIDIA vGPU Software License Server
software.
‣ The clocks on both servers must be accurate and synchronized. NTP is recommended.
‣ The same license configuration file must be installed on both servers. This file is
configured to include the Ethernet MAC addresses of both servers.
If you are configuring the license server for high availability, you must perform the following
tasks for both the primary license server and the secondary license server:
Note: If you require high availability for the license server, you must install the license server
both on the system that you will use as the primary license server and on the system that you
will use as the secondary license server.
CAUTION: To ensure that you download a 64-bit JRE, do not download the JRE from
www.java.com. Either a 32-bit JRE is downloaded or the bitness of the downloaded version
is determined from your browser, which might be 32-bit even on a 64-bit operating system.
‣ Download Oracle Java SE JRE from the Java Downloads for All Operating Systems
page.
‣ Download OpenJDK JRE from the Community builds using source code from OpenJDK
project on GitHub.
2. Install the JRE that you downloaded.
3. Set the JAVA_HOME system variable to the full path to the jre folder of your JRE
installation.
For example:
Ensure that the path does not include any trailing characters, such as a slash or a space.
The license server installer warns users if the path in the JAVA_HOME system environment
variable appears to be incorrect.
If you are upgrading to a new version of the JRE, update the value of the JAVA_HOME
system variable to the full path to the jre folder of your new JRE version.
4. Ensure that the Path system variable contains the path to the java.exe executable file.
The installer may have already added this path for you.
For example:
Note: If a 32-bit JRE and 64-bit JRE are installed, ensure that the path to the 64-bit JRE
appears before the path to the 32-bit JRE in the Path system variable.
‣ If you configured HTTPS for connections between the management interface and the
license server, copy the SSL certificate that the license server was configured with. The
installer deletes the entire contents of any existing license server installation folder,
including files that were added after the license server software was installed, such as the
SSL certificate.
Note:
Copying an SSL certificate might corrupt it. To determine if the certificate is corrupted, run
this command:
$JAVA_HOME/bin/keytool -list -keystore certificate-file-name.jks -
storepass certificate-password
If the certificate is corrupted, contact the CA that issued your certificate to obtain a new
certificate.
‣ If you specified HTTPS for connections from a web browser to the license server
management interface, copy the Tomcat configuration file server.xml so that you can
reinstate the necessary changes to the Tomcat configuration. The installer overwrites the
existing server.xml file and any custom configuration specified in the file is lost.
2. Accept the EULA for the license server software and the Apache Tomcat software used to
support the license server’s management interface.
3. Choose the destination folder where you want the license server software to be installed.
4. In the Choose Firewall Options dialog box, select the ports to be opened in the firewall.
To enable remote clients to access licenses from the server and prevent remote access to
the management interface, use the default setting, which sets ports as follows:
‣ Port 7070 is open to enable remote clients to access licenses from the server.
‣ Port 8080 is closed to ensure that the management interface is available only through
a web browser running locally on the license server host.
5. After installation has completed successfully, click Done to exit the installer.
If you are replacing an existing version of the license server and it was configured to use
HTTPS, re-instate the HTTPS configuration as explained in Configuring HTTPS for Connections
Between the Management Interface and the License Server and Specifying HTTPS for
Connections from a Web Browser to the License Server Management Interface.
Verify the installation by accessing the license server management interface as explained in
Accessing the License Server Management Interface.
If you are upgrading from an earlier 64-bit license server and are not changing your JRE, you
can upgrade the license server software by overinstalling this release of the license server on
your current release of the license server.
If you are replacing an existing version of the license server that was configured to use HTTPS,
copy the files that are necessary to re-instate the configuration after you install the new
version.
‣ If you configured HTTPS for connections between the management interface and the
license server, copy the SSL certificate that the license server was configured with. The
installer deletes the entire contents of any existing license server installation folder,
including files that were added after the license server software was installed, such as the
SSL certificate.
Note:
Copying an SSL certificate might corrupt it. To determine if the certificate is corrupted, run
this command:
$JAVA_HOME/bin/keytool -list -keystore certificate-file-name.jks -
storepass certificate-password
If the certificate is corrupted, contact the CA that issued your certificate to obtain a new
certificate.
‣ If you specified HTTPS for connections from a web browser to the license server
management interface, copy the Tomcat configuration file server.xml so that you can
reinstate the necessary changes to the Tomcat configuration. The installer overwrites the
existing server.xml file and any custom configuration specified in the file is lost.
‣ Enter the absolute path to the destination folder where you want the license server
software to be installed.
9. In the Choose Firewall Options screen box, select the ports to be opened in the firewall.
The options for selecting ports to be opened in the firewall are presented as follows:
->1- License server (port 7070)
2- Management interface (port 8080)
‣ Port 7070 is open to enable remote clients to access licenses from the server.
‣ Port 8080 is closed to ensure that the management interface is available only through
a web browser running locally on the license server host.
10.In the Pre-Installation Summary screen, review your choices and press Enter to start the
installation.
After installation has completed successfully, the Install Complete screen is displayed.
11.In the Install Complete screen, press Enter to exit the installer.
If you are replacing an existing version of the license server and it was configured to use
HTTPS, re-instate the HTTPS configuration as explained in Configuring HTTPS for Connections
Between the Management Interface and the License Server and Specifying HTTPS for
Connections from a Web Browser to the License Server Management Interface.
Verify the installation by accessing the license server management interface as explained in
Accessing the License Server Management Interface.
Note:
Do not perform this task for upgrades from a 32-bit license server to a 64-bit license server.
Instead, follow the instructions in Upgrading from a 32-Bit to a 64-Bit NVIDIA vGPU Software
License Server on Windows.
If you are upgrading from an earlier 64-bit license server and are not changing your JRE, you
can upgrade the license server software by overinstalling this release of the license server
on your current release of the license server. For instructions, see Installing the License
Server Software on Windows in Graphical Mode and Installing the License Server Software on
Windows in Console Mode.
1. Use the Services application to confirm that the Apache Tomcat 9.0 Tomcat9 service is
running.
2. Use the Services application to confirm that the FlexNet License Server - nvidia service is
running.
3. In the Services application, context-click the FlexNet License Server - nvidia service and
choose Stop.
4. In the Services application, context-click the Apache Tomcat 9.0 Tomcat9 service and
choose Stop.
5. Uninstall Oracle Java SE JRE.
a). Open Windows Control Panel and under Programs, follow the Uninstall a program
link.
b). Context-click the installed Oracle Java SE JRE program, choose Uninstall, and if you
are prompted to confirm that you want to uninstall the program, click Yes.
6. Install OpenJDK.
7. Set the JAVA_HOME system variable to the full path to the jre folder of your JRE
installation.
For example: C:\Program Files\ojdkbuild\java-1.8.0-openjdk-1.8.0.201-1\jre.
Ensure that the path does not include any trailing characters, such as a slash or a space.
The license server installer warns users if the path in the JAVA_HOME system environment
variable appears to be incorrect.
If you are upgrading to a new version of the JRE, update the value of the JAVA_HOME
system variable to the full path to the jre folder of your new JRE version.
8. Ensure that the Path system variable contains the path to the java.exe executable file.
For example: C:\Program Files\ojdkbuild\java-1.8.0-openjdk-1.8.0.201-1\bin.
Note: If a 32-bit JRE and 64-bit JRE are installed, ensure that the path to the 64-bit JRE
appears before the path to the 32-bit JRE in the Path system variable.
Upgrade to this release of the license server by installing the license server software as
explained in the following topics:
Note: If you are upgrading from an earlier 64-bit license server and are not changing your
JRE, you can upgrade the license server software by overinstalling this release of the license
server on your current release of the license server. For instructions, see Installing the License
Server Software on Windows in Graphical Mode and Installing the License Server Software on
Windows in Console Mode.
If you are replacing an existing version of the license server that was configured to use HTTPS,
copy the files that are necessary to re-instate the configuration after you install the new
version.
‣ If you configured HTTPS for connections between the management interface and the
license server, copy the SSL certificate that the license server was configured with. The
installer deletes the entire contents of any existing license server installation folder,
including files that were added after the license server software was installed, such as the
SSL certificate.
Note:
Copying an SSL certificate might corrupt it. To determine if the certificate is corrupted, run
this command:
$JAVA_HOME/bin/keytool -list -keystore certificate-file-name.jks -
storepass certificate-password
If the certificate is corrupted, contact the CA that issued your certificate to obtain a new
certificate.
‣ If you specified HTTPS for connections from a web browser to the license server
management interface, copy the Tomcat configuration file server.xml so that you can
reinstate the necessary changes to the Tomcat configuration. The installer overwrites the
existing server.xml file and any custom configuration specified in the file is lost.
c). In the list of programs, select Apache Tomcat and click Uninstall/Change.
3. Remove the existing license server log files and trusted storage database by deleting
all files in the folder %SystemDrive%:\Windows\ServiceProfiles\NetworkService
\flexnetls\nvidia.
4. Uninstall the existing 32-bit JRE.
a). Open Windows Control Panel and under Programs, follow the Uninstall a program
link.
b). Context-click the installed JRE program, choose Uninstall, and if you are prompted to
confirm that you want to uninstall the program, click Yes.
5. Install a 64-bit JRE.
For instructions, see Installing the Java Runtime Environment on Windows.
6. Install the 64-bit license server and Apache Tomcat software.
For instructions, see the following topics:
3. Download the 32-bit/64-bit Windows Service Installer for the version of Apache Tomcat you
are interested in from the Apache Tomcat project website and run it.
For information about Apache Tomcat releases that the license server supports, see
Virtual GPU License Server Release Notes.
4. Use the Services application to confirm that the Apache Tomcat service for the version
that you installed is running.
Note: If you require high availability for the license server, you must install the license server
both on the system that you will use as the primary license server and on the system that you
will use as the secondary license server.
Note: For information about installing Oracle Java SE JRE, see the Java Platform, Standard
Edition Documentation in the Oracle Help Center. After installing Oracle Java SE JRE, set the
JAVA_HOME environment variable to the jre folder of your Oracle Java SE JRE installation.
If a Java version is installed, the version is shown as follows and you do not need to install
JRE.
openjdk version "1.8.0_272"
OpenJDK Runtime Environment (build 1.8.0_272-b10)
OpenJDK 64-Bit Server VM (build 25.272-b10, mixed mode)
[nvidia@localhost ~]$
Note: If a 32-bit JRE and 64-bit JRE are installed, ensure that the java -version
command shows the 64-bit JRE.
[Service]
Type=forking
Environment=JAVA_HOME=jre-directory
Environment=CATALINA_PID=/usr/share/tomcat/temp/tomcat.pid
Environment=CATALINA_HOME=/usr/share/tomcat
Environment=CATALINA_BASE=/usr/share/tomcat
Environment='CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC'
Environment='JAVA_OPTS=-Djava.awt.headless=true -Djava.security.egd=file:/
dev/./urandom'
ExecStart=/usr/share/tomcat/bin/startup.sh
ExecStop=/usr/share/tomcat/bin/shutdown.sh
User=tomcat
Group=tomcat
UMask=0007
RestartSec=15
Restart=always
[Install]
WantedBy=multi-user.target
jre-directory
The jre directory of your OpenJDK or Oracle Java SE JRE installation, for example,
for the OpenJDK JRE, /usr/lib/jvm/java-8-openjdk-amd64/jre.
b). Load the service unit file that you created.
[nvidia@localhost ~]$ sudo systemctl daemon-reload
c). Enable the Apache Tomcat service for automatic startup on boot.
[nvidia@localhost ~]$ sudo systemctl enable tomcat.service
5. Start the tomcat.service service.
[nvidia@localhost ~]$ sudo systemctl start tomcat.service
6. Verify that the Tomcat service is operational by opening the URL http://localhost:8080
in a web browser.
The home page of the default Tomcat web application should be displayed, as shown in
Figure 6.
Note: Do not relocate the webapps folder, which is where Web applications are deployed on
Apache Tomcat Server. If you relocate this folder, the installation of the license server software
may fail.
5. Choose the destination folder where you want the license server software to be installed.
6. Specify the path to the folder on the local host that contains the webapps folder.
Web applications are deployed on Apache Tomcat Server to the webapps folder. The
default path to this folder is /usr/share/tomcat.
7. In the Choose Firewall Options dialog box, shown in Figure 10, select the ports to be
opened in the firewall.
To enable remote clients to access licenses from the server and prevent remote access to
the management interface, use the default setting, which sets ports as follows:
‣ Port 7070 is open to enable remote clients to access licenses from the server.
‣ Port 8080 is closed to ensure that the management interface is available only through
a web browser running locally on the license server host.
8. After installation has completed successfully, click Done to exit the installer.
Verify the installation by accessing the license server management interface as explained in
Accessing the License Server Management Interface.
If you are upgrading from an earlier 64-bit license server and are not changing your JRE, you
can upgrade the license server software by overinstalling this release of the license server on
your current release of the license server.
‣ Port 7070 is open to enable remote clients to access licenses from the server.
‣ Port 8080 is closed to ensure that the management interface is available only through
a web browser running locally on the license server host.
10.In the Pre-Installation Summary screen, review your choices and press Enter to start the
installation.
After installation has completed successfully, the Install Complete screen is displayed.
11.In the Install Complete screen, press Enter to exit the installer.
Verify the installation by accessing the license server management interface as explained in
Accessing the License Server Management Interface.
Note: If you are upgrading from an earlier 64-bit license server and are not changing your
JRE, you can upgrade the license server software by overinstalling this release of the license
server on your current release of the license server. For instructions, see Installing the License
Server Software on Linux in Graphical Mode and Installing the License Server Software on
Linux in Console Mode.
The following example gets the parent of the jre folder for an installation of 64-bit
OpenJDK 8.
[nvidia@localhost ~] update-java-alternatives -l
java-1.8.0-openjdk-amd64 1081 /usr/lib/jvm/java-1.8.0-openjdk-
amd64
b). Open the file /etc/systemd/system/tomcat.service in a plain text editor and edit
the value of the JAVA_HOME environment variable to specify the full path to the jre
folder of your OpenJDK installation.
The following example sets JAVA_HOME for an installation of 64-bit OpenJDK 8.
JAVA_HOME=/usr/lib/jvm/java-8-openjdk-amd64/jre
8. Start the Apache Tomcat tomcat service.
[nvidia@localhost ~]$ sudo systemctl start tomcat.service
9. Start the NVIDIA vGPU software license server flexnetls-nvidia service.
[nvidia@localhost ~]$ systemctl start flexnetls-nvidia.service
10.Confirm that the license server is working by accessing the license server management
interface as explained in Accessing the License Server Management Interface.
Upgrade to this release of the license server by installing the license server software as
explained in the following topics:
Note: If you are using BYOL, you can host the license server on a physical machine or an on-
premises VM if you prefer.
The following cloud services support NVIDIA vGPU software running in GPU pass-through
mode:
‣ Amazon EC2
‣ Google Cloud Platform
‣ Microsoft Azure
For more information, see NVIDIA Virtual GPU Software Supported Cloud Services.
A license server that is hosted in the cloud is accessed over the public Internet. For increased
security, protect the license server and the licenses installed on it as follows:
‣ Use the features of the license server to secure the license server as as explained in
Securing the NVIDIA vGPU Software License Server.
‣ Restrict access to the license server by client machines in one of the following ways:
‣ Use firewall settings on the license server host or elsewhere to limit the machines that
can access the license server.
‣ Configure the license server host and the licensed client VMs to operate within a virtual
private network.
1. In a web browser, visit the home page for the license server management interface.
‣ If the license server host does not permit remote access, open a web browser on the
license server host and connect to one of the following URLs, depending on whether
the connection protocol is HTTP or HTTPS:
‣ HTTP: http://localhost:8080/licserver
‣ HTTPS: https://localhost:https-port/licserver
‣ If the license server host’s network firewall is configured to permit remote access to
the license server, open a web browser on a remote machine and connect to one of the
following URLs, depending on whether the connection protocol is HTTP or HTTPS:
‣ HTTP: http://hostname:8080/licserver
‣ HTTPS: https://hostname:https-port/licserver
https-port
The HTTPS port for users' connections from a web browser to the license server
management interface, for example, 8443. This port is specified in the Apache Tomcat
configuration as explained in Specifying HTTPS for Connections from a Web Browser to
the License Server Management Interface.
hostname
The fully-qualified domain name or IP address of the license server host.
the Login page is displayed.
2. If administrative security is enabled for the license server, log in to the license server.
a). In the license server management interface, select Login.
b). In the Login page that is displayed, enter your user name and password for logging in
to the license server and click Authorize.
After a user has logged into the license server management interface through a web
browser, other users can access the license server through a browser at the same URL
without the need to log in for up to 30 minutes after the first successful login. After 30
minutes, any user must log in again to access the license server management interface
through a web browser.
Note: If administrative security is not enabled for the license server and you try to log in,
the license server reports that the login failed. However, you can ignore the login failure
and continue to use the license server management interface.
The browser should display the home page for the license server management interface, as
shown in Figure 13.
Note: If you are configuring the license server for high availability, you will need the MAC
address of both the primary license server and the secondary license server.
Note: You must use the same ETHERNET ID to consistently identify the server when
generating licenses on the NVIDIA Licensing Portal. If your platform has multiple Ethernet
interfaces, multiple ETHERNET entries may be displayed in the Server host ID drop-down
list. To ensure that you use the same ETHERNET ID to consistently to identify the server,
select one entry that corresponds to a primary (nonremovable) interface on the platform.
Note: The default log level of the license server is ERROR. If you enable failover support with the
log level set to ERROR, INFO level messages are not recorded in the log files and you will not be
able to verify the setup as explained in Verifying High Availability Setup of the License Server.
To ensure that you can verify the setup, set the log level to INFO before enabling failover
support. If necessary, revert the log level to ERROR after verifying the setup. For instructions,
see Changing the License Server Log Level.
2. Under License Generation, use the Backup URI and Main URI fields to set the URI to each
server in a failover configuration.
CAUTION: To protect sensitive data that is being transmitted during administrative operations,
use the HTTPS protocol for communications between the license server and its management
interface when administrative security is enabled for the license server. For more information,
see Configuring HTTPS for Connections Between the Management Interface and the License
Server.
In any subsequent nvidialsadmin command, users must provide the required credentials
for authenticating with the license server. For more information, see Authenticating with the
License Server.
The authentication requirements for accessing the license server management interface
through a web browser are different. After a user has logged into the license server
management interface through a web browser, other users can access the license server
through a browser at the same URL without the need to log in for up to 30 minutes after the
first successful login. After 30 minutes, any user must log in again to access the license server
management interface through a web browser.
If you no longer require administrative security to be enabled on the license server, set the
property security.enabled to false.
nvidialsadmin -authorize admin admin-password -config -set security.enabled=false
User authentication succeeded.
After setting the property security.enabled to false, restart the Apache Tomcat server and
the flexnetls-nvidia service.
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Run the nvidialsadmin utility with only the -users option and no other options.
nvidialsadmin -users
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Run the nvidialsadmin utility with the -users and -create options.
nvidialsadmin -users -create new-username new-user-password[ roles]
new-username
Your choice of user name for the user that you are adding.
new-user-password
Your choice of password for authenticating the user that you are adding. The password
is case sensitive and must be a strong password that meets the requirements in License
Server Password Requirements.
roles
One or more roles that determine operations allowed by the user for managing licenses on
the license server:
‣ ROLE_READ grants the user privileges to perform read-only operations on the license
server, for example, to query features, licenses, license reservations, or license server
status. This role is assigned by default.
‣ ROLE_RESERVATIONS grants the user privileges to create and manage license
reservations.
‣ ROLE_ADMIN grants the user administrator privileges to update license server policies
(local license server only), create and manage other user accounts, and perform other
administrative tasks.
You can assign multiple roles to a user by separating each role with the + sign, for example,
ROLE_READ+ROLE_RESERVATIONS.
This example adds the user lsmgr with the password 3Nt3rl5vr and the ROLE_ADMIN role.
nvidialsadmin -users -create lsmgr 3Nt3rl5vr ROLE_ADMIN
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Run the nvidialsadmin utility with the -users and -edit options.
This example changes role of the user lsmgr to the ROLE_RESERVATIONS role. Because the
user's existing password 3Nt3rl5vr is specified, the password is not changed.
nvidialsadmin -users -edit lsmgr 3Nt3rl5vr ROLE_RESERVATIONS
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Run the nvidialsadmin utility with the -users and -delete options.
nvidialsadmin -users -delete username
username
The user name for the user whose account you are deleting.
This example deletes the user account lsmgr from the license server.
nvidialsadmin -users -delete lsmgr
Note: HTTPS is not supported for connections between the license server and licensed clients.
Only HTTP is supported for these connections.
‣ Enable HTTPS
‣ The port number for incoming HTTPS requests
‣ The full or relative path to the SSL certificate file for the license server on the license
server host
‣ The password with which the certificate is secured
https-in:
# Set to true to enable HTTPS
enabled: true
# HTTPS listening port
port: https-port
# Path to keystore
keystore-path: server-certificate-file-path
# Keystore password. You can obfuscate this with java -jar flexnetls.jar -
password your-password-here
keystore-password: password
https-port
The port number for incoming HTTPS requests, for example, 443.
server-certificate-file-path
The full or relative path to the SSL certificate file for the license server on the license
server host.
password
The password with which the certificate is secured. If the password is obfuscated,
specify the entire obfuscated string, including the OBF: prefix, for example,
OBF:1ri71v1r1v2n1ri71shq1ri71shs1ri71v1r1v2n1ri7.
Note: To protect this password, ensure that the file that contains the password is
appropriately secured. Specifically, limit access to the file that contains the password
so that it can be read only by the user that the Tomcat process runs as and the
administrator user on Windows or the root user on Linux.
This example provides access to the SSL certificate file keystore.jks, which is protected
by an obfuscated password. The port number for incoming HTTPS requests is 443.
https-in:
# Set to true to enable HTTPS
enabled: true
# HTTPS listening port
port: 443
# Path to keystore
keystore-path: ..\keystore.jks
# Keystore password. You can obfuscate this with java -jar flexnetls.jar -
password your-password-here
keystore-password: OBF:1ri71v1r1v2n1ri71shq1ri71shs1ri71v1r1v2n1ri7
2. Restart the license server.
‣ Enable HTTPS
‣ The port number for incoming HTTPS requests
‣ The name of the SSL certificate file for the license server on the license server host
‣ The password with which the certificate is secured
https-in:
# Set to true to enable HTTPS
enabled: true
# HTTPS listening port
port: https-port
# Path to keystore
keystore-path: server-certificate-file-name
# Keystore password. You can obfuscate this with java -jar flexnetls.jar -
password your-password-here
keystore-password: password
https-port
The port number for incoming HTTPS requests, for example, 1443. To avoid the need
to run the license server from a privileged account, use a port number greater than or
equal to 1024. On Linux systems, access to ports below 1024 is restricted to processes
that run with root user privileges.
The default port for HTTPS requests is 443. If you use a different port, you can re-direct
incoming HTTPS requests for the default port to the port that you are using.
server-certificate-file-name
The name of the SSL certificate file for the license server on the license server host. Do
not include the path to this file.
password
The password with which the certificate is secured. If the password is obfuscated,
specify the entire obfuscated string, including the OBF: prefix, for example,
OBF:1ri71v1r1v2n1ri71shq1ri71shs1ri71v1r1v2n1ri7.
Note: To protect this password, ensure that the file that contains the password is
appropriately secured. Specifically, limit access to the file that contains the password
so that it can be read only by the user that the Tomcat process runs as and the
administrator user on Windows or the root user on Linux.
This example provides access to the SSL certificate file keystore.jks, which is protected
by an obfuscated password. The port number for incoming HTTPS requests is 1443.
https-in:
Figure 16. License Server Settings for Setting the Connection Protocol
2. In the Settings page, set the properties for connecting to the license server over HTTPS
and click Save.
a). Set the License server host name property to the value of the CN attribute in the
certificate signing request for your license server certificate.
For example, if the CN attribute was set to the fully qualified domain name, set License
server host name to the fully qualified domain name of the license server.
b). Set the License server listen port property to the port number for incoming HTTPS
requests, for example, 443 or 1443.
The port number is set in the license server configuration files. If necessary, ask the
system administrator who configured the license server for the port number.
Note: Do not use this port number for connections between the license server and
licensed clients. For connections between the license server and licensed clients, you
must still use port 7070.
If your SSL certificate for the license server is a self-signed certificate, import the certificate
into the keystore as explained in Importing a Self-Signed or Privately Signed Certificate into
the Truststore File.
To specify that the license server management interface connects to the license server over
HTTP, set the License server listen port to the port number for incoming HTTP requests, for
example, 7070, set the Connect using HTTPS property to No, and click Save.
1. In a web browser, access the license server management interface, accepting the SSL
certificate if required to establish the connection.
For more information, see Accessing the License Server Management Interface.
2. From the web browser, export the certificate as a DER-encoded binary X.509 (.cer) file
in the directory that contains the cacerts Java keystore file, namely $JAVA_HOME/lib/
security.
Note: If the certificate chain contains an intermediate certificate, you must also save it in
the same location.
How to export a certificate from a web browser depends on the web browser that you are
using. For example, if you are using Google Chrome or Microsoft Edge, follow these steps:
a). In the web browser, connect to the URL https://hostname:https-port/api/1.0/
health.
hostname
The fully-qualified domain name or IP address of the license server host.
https-port
The port number for incoming HTTPS requests, for example, 443 or 1443. This port
is specified in the Apache Tomcat configuration as explained in Configuring the
License Server with an SSL Certificate.
b). Click the Not secure icon adjacent to the URL in the URL field of the browser and in the
window that opens, click Certificate.
c). In the Certificate window that opens, click the Details tab and on the Details tab, click
Copy to File.
d). Follow the Certificate Export Wizard to select the DER-encoded binary X.509 (.CER)
format and the directory and file name of the exported certificate file.
3. On the license server host, open a Windows Command Prompt window or a Linux shell
window.
4. Change to the directory that contains the cacerts Java keystore file.
cd $JAVA_HOME/lib/security
5. Make a backup copy of the default cacerts Java keystore file.
alias
The alias name for accessing the keystore entry for the certificate that you are
importing. This alias name was specified when the certificate was created.
certificate-file
The name, including the .cer extension, of the file to which you exported the certificate.
7. Verify the keystore entry for each certificate that you imported.
alias
The alias name for accessing the keystore entry that you specified when you imported
the certificate.
8. Restart the Apache Tomcat server to reload the updated cacerts keystore file.
Ensure that the port is not already in use by another service. For example, do not use
the port for accessing the license server SSL certificate as described in Configuring the
License Server with an SSL Certificate on Windows and Configuring the License Server
with an SSL Certificate on Linux.
path-to-server-certificate
The full path to the certificate file on the license server host.
password
The password with which the certificate is secured. The password must be specified in
plain text. You cannot use an obfuscated password.
Note: To protect this password, ensure that the file that contains the password is
appropriately secured. Specifically, limit access to the file that contains the password
so that it can be read only by the user that the Tomcat process runs as and the
administrator user on Windows or the root user on Linux.
For additional information about how to obscure the password, see Apache Tomcat
Passwords FAQ.
For more information, see Edit the Tomcat Configuration File in the Apache Tomcat SSL/
TLS Configuration HOW-TO.
2. Restart the Apache Tomcat service.
Users now must access the license server management interface from a web browser through
HTTPS on the specified port, for example, port 8443.
Use the NVIDIA Licensing Portal to manage your entitlements, licenses, and contacts.
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to create the license server.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select
the virtual group for which you are creating the license server from the list of virtual
groups at the top right of the page.
If no license servers have been created for your organization or virtual group, the NVIDIA
Licensing Portal dashboard displays a message asking if you want to create a license
server.
you can install it on the license server host associated with the license server on the NVIDIA
Licensing Portal.
The role that this task requires depends on whether the license file is being downloaded for an
organization or a virtual group:
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to download the license file.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select the
virtual group for which you are downloading the license file from the list of virtual
groups at the top right of the page.
2. In the list of license servers on the NVIDIA Licensing Portal dashboard, select the license
server whose associated license file you want to download.
3. In the License Server Details page that opens, review the licenses allocated to the license
server.
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to add or remove licenses.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select the
virtual group for which you are adding or removing licenses from the list of virtual
groups at the top right of the page.
2. In the list of license servers on the NVIDIA Licensing Portal dashboard, select the license
server to which you want to add or from which you want to remove licenses.
3. Click MANAGE LICENSES.
4. In the Manage Licenses pop-up window that opens, add or remove licenses for the
licensed products that you are interested in.
Add or remove licenses for each licensed product as follows:
a). From the Feature drop-down list, select the product for which you want to add or
remove licenses.
b). In the Licenses field, enter the number of licenses for the product that you want to
remain on the server after updating licenses.
‣ To add licenses to the server, enter a number greater than the number already
allocated to the server, but less than or equal to the total number of licenses
available.
If you enter a number greater than the total number of licenses available, an error
occurs.
‣ To remove licenses from the server, enter a number less than the number already
allocated to the server but greater than 0.
For example, to remove 4 licenses from a server to which 10 licenses are allocated,
leaving 6 licenses allocated to the server, enter 6 in the Licenses field.
If you enter 0, an error occurs. You must leave at least 1 license on the license
server. If you want to remove all licenses for a product from the license server, you
must follow the instructions in Removing Licensed Products from a License Server.
c). Click ADD.
The product and number of licenses are added to the Features to Modify list.
5. After adding or removing licenses for all the products that you are interested in, click
UPDATE LICENSES.
To ensure that the correct licenses are available on your license server host, download and
install the license file after you add or remove licenses.
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to add licensed products.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select the
virtual group for which you are adding licensed products from the list of virtual groups
at the top right of the page.
2. In the list of license servers on the NVIDIA Licensing Portal dashboard, select the license
server to which you want to add licensed products.
3. Click ADD FEATURES.
4. In the Add Features pop-up window that opens, add the licensed products that you are
interested in.
Add each licensed product as follows:
a). From the Feature drop-down list, select the licensed product that you want to add to
the license server.
b). In the Licenses field, enter the number of licenses for the product that you want to
allocate to the server.
c). Click ADD.
The product and number of licenses are added to the Features to Add list.
5. After adding all the licensed products that you are interested in, click ADD FEATURES.
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to remove licensed products.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select the
virtual group for which you are removing licensed products from the list of virtual
groups at the top right of the page.
2. In the list of license servers on the NVIDIA Licensing Portal dashboard, select the license
server from which you want to remove licensed products.
3. Click REMOVE FEATURES.
4. In the Remove Features pop-up window that opens, select the licensed products that you
want to remove.
For each licensed product that you want to remove, select the product from the Feature
drop-down list and click REMOVE.
5. After removing all the licensed products that you are interested in, click REMOVE
FEATURES.
If you removed licenses in preparation for migrating them to a new server, add them to the
new server as explained in Adding Licensed Products to a License Server.
‣ For an organization, this task requires the Organization Administrator or the Organization
User role.
‣ For a virtual group, this task requires the Virtual Group Administrator or the Virtual Group
User role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group for which you
want to delete the license server.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select
the virtual group for which you are deleting the license server from the list of virtual
groups at the top right of the page.
2. In the list of license servers on the NVIDIA Licensing Portal dashboard, select the license
server that you want to delete.
3. In the License Server Details page that opens, click DELETE SERVER.
4. When asked to confirm that you want to delete the license server, click DELETE LICENSE
SERVER.
‣ Entitlements
‣ Users
‣ Virtual groups
‣ License servers provisioned from the entitlements that have not been assigned to a virtual
group
An organization administrator can mange virtual groups as follows:
‣ Invite a contact currently not within the organization to register at the organization level.
‣ Add users and administrators to a virtual group when creating the virtual group.
‣ Delete any administrator or user at either the organization level or the virtual group level
except the last virtual group administrator in a virtual group.
‣ Manage the role of any organization-level contact.
An organization administrator also has all the capabilities of an organization user.
An organization user can mange entitlements that have not been assigned to a virtual group as
follows:
A virtual group administrator can manage other contacts in the virtual group as follows:
‣ Add an exiting contact within the organization who is not an organization administrator to
the virtual group.
‣ Invite a contact currently not within the organization to register and join the virtual group.
‣ Remove any other contact in the virtual group, regardless of the contact's role.
Virtual group administrators cannot remove themselves from a virtual group.
‣ Manage the role of any other contact in the virtual group.
Virtual group administrators cannot manage their own roles.
A virtual group administrator also has all the capabilities of a virtual group user.
‣ All license servers provisioned from entitlements assigned to the virtual group
A virtual group user can mange entitlements within a virtual group as follows:
4. In the Invite User pop-up window that opens, provide the e-mail address and the name of
the contact, select the contact's role, and click SEND INVITATION.
The role to select depends on whether you are adding the contact to an organization or a
virtual group.
‣ If you added a contact who is already registered to a virtual group, the contact will be able
the select the virtual group after next logging in.
‣ If the contact is a new contact, an e-mail is sent to the contact at the e-mail address that
you provided.
Note:
The link to the NVIDIA Enterprise Support Portal in this e-mail provides information about
how to contact NVIDIA Enterprise Support.
If the contact that you added is a new contact, tell the contact to follow the directions in the e-
mail to create an NVIDIA Enterprise Account as explained in Virtual GPU Software Quick Start
Guide.
3. In the list of contacts in the User Management page that opens, follow the link to remove
the contact.
‣ If you are removing the contact from an organization, follow the Delete link.
‣ If you are removing the contact from a virtual group, follow the Remove link.
Note: You cannot remove the only virtual group administrator from a virtual group. The
Remove link for that contact is inactive and dimmed.
The contact is removed from the list of contacts on the USER MANAGEMENT page.
‣ A contact that is removed from an organization is removed from the list of registered
contacts for the organization.
‣ A contact that was a member of multiple virtual groups when removed from a virtual group
remains a member of the other virtual groups.
‣ A contact that was a member of only the virtual group from which you removed the contact
is returned to the organization with the organization user role.
‣ For the organization, this task requires the Organization Administrator role.
‣ For a virtual group, this task requires the Virtual Group Administrator role.
1. In the NVIDIA Licensing Portal, navigate to the organization or virtual group to which the
contact belongs.
a). If you are not already logged in, log in to the NVIDIA Enterprise Application Hub and
click NVIDIA LICENSING PORTAL to go to the NVIDIA Licensing Portal.
b). Optional: If your assigned roles give you access to multiple virtual groups, select the
virtual group to which the contact belongs from the list of virtual groups at the top right
of the page.
2. In the left navigation pane of the NVIDIA Licensing Portal dashboard, click USER
MANAGEMENT.
3. In the list of contacts in the User Management page that opens, follow the View role link
for the contact.
You are shown the contact's current role and the role to which you can change it.
4. In the User Role window, click the button to change the contact's role.
‣ Your organization contains at least one registered contact to whom you can assign the
virtual group administrator role.
‣ No licensed products in any of the entitlements that you want to add to the group have
been added to a license server.
This task requires the Organization Administrator role.
1. If you are not already logged in, log in to the NVIDIA Licensing Portal.
2. In the left navigation pane of the NVIDIA Licensing Portal dashboard, click VIRTUAL
GROUPS.
3. In the Virtual Groups page that opens, click CREATE VIRTUAL GROUP.
The Create Virtual Group pop-up window opens.
4. In the Virtual Group Name field, enter your choice of name for the group.
5. In the Description field, enter a short text description of the group.
This description will be displayed for the group in the list of virtual groups on the Virtual
Groups page.
6. Add the entitlements that you want to assign to the virtual group.
For each entitlement that you want to add, select the entitlement from the Entitlements
drop-down list and click ADD.
You must add at least one entitlement. You cannot create a virtual group with no
entitlements.
Each entitlement that you select is added to the Added Entitlements list.
7. Add the users that you want to be members of the virtual group.
Add each user as follows:
a). From the drop-down list of users, select the user.
b). Follow the link to add the user with the role that you want for the user.
‣ To add the user with the Virtual Group Administrator role, follow the Add as Admin
link.
‣ To add the user with the Virtual Group User role, follow the Add as User link.
The user is added to the box under the drop-down list of users.
Note: Any user with the Organization Administrator role loses that role and gains the
role that you assign when added to the virtual group.
You must add at least one virtual group administrator to the group. You cannot create a
virtual group with no administrators.
Tip: To prevent the absence of a single user from denying you access to the virtual group,
consider adding at least two virtual group administrators to the virtual group.
8. Click CREATE VIRTUAL GROUP in the Create Virtual Group pop-up window.
After you create a virtual group, you can perform only the following operations on the virtual
group:
1. If you are not already logged in, log in to the NVIDIA Licensing Portal.
2. In the left navigation pane of the NVIDIA Licensing Portal dashboard, click VIRTUAL
GROUPS.
3. In the list of virtual groups on the Virtual Groups page, follow the Delete link for the virtual
group that you want to delete.
4. When asked to confirm that you want to delete the virtual group, click DELETE VIRTUAL
GROUP.
‣ The entitlements that you want to add belong to the organization and not to a virtual group.
‣ No licensed products in any of the entitlements that you want to add to the group have
been added to a license server.
This task requires the Organization Administrator role.
1. If you are not already logged in, log in to the NVIDIA Licensing Portal.
2. In the left navigation pane of the NVIDIA Licensing Portal dashboard, click VIRTUAL
GROUPS.
3. Expand the list of entitlements in the organization by clicking the up arrow head adjacent
to the organization in the list of virtual groups.
4. In the list of entitlements, follow the Move link for the entitlement.
Note: You cannot move an entitlement if any of its licensed products has been added to a
license server. The Move link for the entitlement is inactive and dimmed.
5. In the Move Entitlement window that opens, select the virtual group where you want to
move the entitlement and click MOVE ENTITLEMENT.
The entitlement is removed from the list of entitlements in the organization and added to
the list of entitlements in the virtual group.
1. If you are not already logged in, log in to the NVIDIA Licensing Portal.
2. In the left navigation pane of the NVIDIA Licensing Portal dashboard, click VIRTUAL
GROUPS.
3. Expand the list of entitlements in the virtual group that contains the entitlement that you
want to remove by clicking the up arrow head adjacent to the group.
4. In the list of entitlements, follow the Remove link for the entitlement.
Note: You cannot remove an entitlement if any of its licensed products has been added
to a license server or if it is the only entitlement in a group. The Remove link for the
entitlement is inactive and dimmed.
5. When asked to confirm that you want to remove the entitlement, click REMOVE
ENTITLEMENT.
The entitlement is removed from the list of entitlements in the virtual group and added to
the list of entitlements in the organization.
You can now move the entitlement that you removed to transfer it to a different virtual group
as explained in Moving an Entitlement from your Organization to a Virtual Group.
Organization Administrators
The organization administrators are responsible for setting up virtual groups and managing
entitlements for the entire organization. The individuals chosen to be organization
administrators must understand the organization structure and purchasing process, so that
they are capable of routing newly purchased entitlements appropriately.
To ensure that someone is always available to move newly purchased entitlements into the
correct virtual group, consider designating at least three organization administrators.
Virtual Groups
To simplify the allocation entitlements to the entity for which they were purchased, consider
creating a virtual group for every subsidiary or geographic region, as appropriate.
Managing licenses on your local NVIDIA vGPU software license server involves installing
licenses on the license server and controlling and monitoring the usage of installed licenses.
You manage the license server in a web browser through the license server management
interface.
You can also manage the license server from the command line.
Note: If you have configured high availability for the license server, you must install the license
both on the primary license server and on the secondary license server.
Before installing a license, ensure that you have downloaded the license file from the NVIDIA
Licensing Portal.
3. In the file browser that opens, select the .bin file and click Open.
4. Back on the License Management page, click Upload to install the license file on the
license server.
The license server should confirm successful installation of the license file.
5. If you have configured high availability for the license server, restart the license server
service on the secondary license server.
‣ On Windows, use the Service Manager, which is accessible from Task Manager, to
restart the FNLS-nvidia service.
‣ On Linux, as root, restart the flexnetls-nvidia service.
[nvidia@localhost ~]$ sudo systemctl restart flexnetls-nvidia
‣ For the primary server, search for the string Received sync request from the backup
server.
22:46:30,085 INFO [request sync-session=480THG8NMUHJ] Received sync request from
the backup server
22:46:30,977 INFO [request] POST:/fne/bin/capability
22:46:30,977 INFO [request sync-session=480THG8NMUHJ] Received sync request from
the backup server
22:46:51,034 INFO [request] POST:/request
‣ For the secondary server, search for the string Starting sync: backup requests main
-> backup.
22:46:29,648 INFO [sync-session=480THG8NMUHJ] Starting sync: backup requests
main -> backup.
22:46:31,438 INFO [sync-session=480THG8NMUHJ] Successfully completed sync from
main server
Tip: When a client acquires a license from the primary server, the number of available licensed
features is reduced by 1 on both the primary and the secondary servers. When the license
server is operating, you can verify its high availability setup by confirming that the count of
available licenses on the primary and the secondary servers changes as expected as clients
acquire licenses from the server.
For each licensed feature, the properties in the following table are displayed.
The Licensed Feature Details page that opens shows information about the feature.
ensure the borrow period does not expire, if it continues to use the license and has ongoing
network connectivity to the license server.
Note: After creating a group of license reservations, you cannot use the management UI to
delete individual reservations in the group or to add new reservations to the group. If you try to
use the management UI to delete a single entry from the Reservation page, all entries on the
page are deleted. For more information about this issue and its workaround, see Virtual GPU
License Server Release Notes.
After the reservations are submitted, the License Reservations page shows a list of currently
stored reservations on the server.
Note: If GRID Virtual Workstation licenses and licenses are available on the same license
server, GRID Virtual Workstation licenses are assigned first, even to clients that have reserved
licenses.
Note: Because importing license reservations from a file replaces the license server’s current
reservation list, any reservations on the server that are not in the file are lost.
1. Log in to the NVIDIA Licensing Portal with the account that you created for getting your
evaluation licenses.
2. Get the NVIDIA vGPU software for the licenses that you purchased.
For instructions, refer to Virtual GPU Software Quick Start Guide.
3. Add the licenses that you purchased to your license server on the NVIDIA Licensing Portal
as explained in Adding Licensed Products to a License Server.
4. Download your new license file as explained in Downloading a License File.
You can troubleshoot some common issues with the license server yourself without the need
to obtain help from NVIDIA.
Note: Before troubleshooting, review Virtual GPU License Server Release Notes for information
about known issues and potential workarounds.
To confirm the location of the license server log files, use the license server management
interface: Select Configuration and click the Properties tab.
The location of the log files is displayed on the License Server Configuration page in the
Logging Directory field.
1. In the license server management interface, select Configuration and click the Properties
tab.
2. On the License Server Configuration page, in the Logging Threshold field, enter a new log
level, for example WARN or ERROR, and click Save.
All messages at or below the level you set are recorded in the log file. For example, if you set
the log level to WARN, fatal-event, error, and warning messages are recorded.
CONTINUOUS
Sets the time zone to the local time zone. This value is the default if the
loggingStyle attribute is not set.
This example sets the time zone of the timestamps in license server log files to UTC.
loggingStyle: CONTINUOUS_UTC
3. Save your changes and quit the editor.
4. Restart the license server service.
1. If you are trying to access the management interface from a remote machine, try
accessing the interface locally from the license server host.
To access the interface locally, open a web browser on the license server host and connect
to the URL http://localhost:8080/licserver.
2. If you can access the management interface locally, ensure that the license server host’s
firewall is configured to allow remote access to server TCP port 8080.
3. If you cannot access the management interface locally, verify that the Apache Tomcat
service is running on the license server host.
‣ On Windows, use the Services application to restart the service if it is not running.
‣ On Windows, use the Services application to restart the service if it is not running.
‣ The JAVA_HOME environment variable is set to the folder where the Java runtime
environment is installed on the license server host.
‣ The TRUSTED_STORAGE_DIR environment variable is set to %SystemDrive%:\Windows
\ServiceProfiles\NetworkService\flexnetls\nvidia, which is the folder that
contains the trusted storage database files.
‣ The JAVA_HOME environment variable is set to the directory where the Java runtime
environment is installed on the license server host.
‣ The TRUSTED_STORAGE_DIR environment variable is set to /var/opt/flexnetls/
nvidia/, which is the directory that contains the trusted storage database files.
a). Start Task Manager and in the Windows Task Manager window that opens, click the
Services button.
b). In the Services window that opens, context-click FlexNet License Server - nvidia and
from the menu that pops up, choose Start.
1. Close any web browser windows that are accessing the license server.
2. Stop the flexnetls-nvidia service.
# sudo systemctl stop flexnetls-nvidia.service
3. Delete all files in the /var/opt/flexnetls/nvidia/ directory, which contains the trusted
storage database files.
# sudo \rm -rf /var/opt/flexnetls/nvidia/*
4. Start the flexnetls-nvidia service.
# sudo systemctl start flexnetls-nvidia.service
‣ If your organization's software security policies allow, add an exception rule for the license
server application.
‣ Otherwise, contact NVIDIA Enterprise Support for assistance in determining the root cause
of the issue. When you contact NVIDIA Enterprise Support, provide a detailed description
of the symptoms of the issue and the exact versions of any security software that you are
using on the license server host.
1. Add unexpired licenses with a start date in the past to your license server.
For instructions, see Adding Licensed Products to a License Server. To determine the start
date and expiration date of the licenses that you are adding, use the entitlement ID in the
Feature drop-down list to find the licenses on the Entitlements page.
2. Download the license file associated with your license server.
For instructions, see Downloading a License File.
3. Install the licenses in the license file that you downloaded in the previous step.
For instructions, see Installing a License.
For instructions, see Uninstalling the NVIDIA vGPU Software License Server on Windows.
2. Set the JAVA_HOME system variable correctly.
For instructions, see Setting a Windows System Variable.
3. Reinstall the license server software.
For instructions, see:
1. Delete the user variable that was that was inadvertently set instead of a system variable.
For instructions, see Deleting a Windows User Variable.
2. Set the correct system variable.
For instructions, see Setting a Windows System Variable.
1. Click the magnifying glass in the toolbar and in the search box type environment.
2. When Edit the system environment variables appears in the search results, click Open.
3. In the Advanced tab of the System Properties window that opens, click Environment
Variables.
4. In the Environment Variables window that opens, under System variables, select Path and
click Edit.
Note: Ensure that you select Path and click Edit under System variables, not under User
variables.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 100
Troubleshooting the NVIDIA vGPU Software License Server
5. In the Edit environment variable window that opens, determine whether the path to an old
version of the JRE is listed, for example, C:\Program Files\Java\jre1.8.0_191\bin
for the path to the Oracle Java SE java.exe executable file.
‣ If the path to an old version of the JRE is listed, select the path and click Delete.
‣ If the path to an old version of the JRE is not listed, click OK.
6. In the Environment Variables window, click OK and then in the System Properties window,
click OK.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 101
Troubleshooting the NVIDIA vGPU Software License Server
1. Delete the path to the java.exe executable from the Path user variable.
For instructions, see Removing a Path from the Path Windows User Variable.
2. Add the path to the java.exe executable to the Path system variable.
For instructions, see Adding a Path to the Path Windows System Variable.
To resolve this issue, import the SSL certificate for the license server into the truststore file as
explained in Importing a Self-Signed or Privately Signed Certificate into the Truststore File.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 102
Troubleshooting the NVIDIA vGPU Software License Server
To resolve this issue, change either the keystore password or the keypair password to ensure
that both passwords match.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 103
Chapter 7. Uninstalling the NVIDIA
vGPU Software License
Server
You can uninstall the NVIDIA vGPU software License Server when it is no longer required.
‣ In Windows Control Panel, open the Programs and Features pane, select License
Server from the publisher NVIDIA, and click Uninstall/Change.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 104
Uninstalling the NVIDIA vGPU Software License Server
‣ In Windows Explorer, open the license server installation directory and double-click
the Change License Server Installation application.
The default license server installation folder is %SystemDrive%:\NVIDIA
\LicenseServer.
‣ In a Command Prompt window, change to the license server installation directory and
start the license server installer in interactive console mode.
The default license server installation folder is %SystemDrive%:\NVIDIA
\LicenseServer.
C:\NVIDIA\LicenseServer>"Change License Server Installation.exe" -i console
2. If the Configure License Server dialog box opens, ensure that the Uninstall Product option
is selected and click Next.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 105
Uninstalling the NVIDIA vGPU Software License Server
3. When prompted, confirm that you want to uninstall the license server and specify whether
you want to uninstall Apache Tomcat.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 106
Uninstalling the NVIDIA vGPU Software License Server
3. When prompted, confirm that you want to uninstall the license server.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 107
Appendix A. Administering the License
Server from the Command
Line
The nvidialsadmin utility provides options for administering the license server from the
command line.
Options are available for the following administrative operations:
‣ Windows: %SystemDrive%:\NVIDIA\LicenseServer\enterprise
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 108
Administering the License Server from the Command Line
‣ Linux: /opt/flexnetls/nvidia/enterprise
Note:
You must run the nvidialsadmin utility from the folder that contains the
nvidialsadmin.bat batch file or the nvidialsadmin.sh shell script. If you try to run the
utility from another folder by specifying the path to the utility either in the PATH variable or on
the command line, the attempt fails and the following error message is displayed:
Error: Unable to access jarfile nvidialsadmin.jar
Set the license server base URL for the nvidialsadmin utility in one of the following ways:
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 109
Administering the License Server from the Command Line
‣ To be prompted for your password and avoid typing the password in clear text in the
command, provide the -passwordConsoleInput option .
nvidialsadmin -authorize username -passwordConsoleInput
username
Your user name for authenticating with the license server.
password
Your password for authenticating with the license server.
Note: If you specify the wrong credentials more than three times, your license server user
account is blocked for 10 minutes and a message similar to the following example is displayed:
Too many failed logins for user admin on instance WX0EDD7ALYMN.
Logins will be blocked for 10 minutes
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 110
Administering the License Server from the Command Line
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Note: For clarity, required options for authenticating the administrator user and specifying the
license server URL are omitted from this example.
Run the nvidialsadmin utility with the -licenses and -verbose options.
nvidialsadmin -licenses -verbose
=====================================================================================
Feature Name Version Count Used/Available Expiration Start Date
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 111
Administering the License Server from the Command Line
=====================================================================================
Quadro-Virtual-DWS 5.0 5 1/4 permanent 2020-06-30
------------------------------------------------------------------------------
Client Alias Feature / Used Counts
------------------------------------------------------------------------------
ETHERNET/00059A3C7A00 vgpu-ls-1.example.com Quadro-Virtual-DWS/1
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 112
Appendix B. Basic Windows OS
Administration Tasks
Some tasks for installing, configuring, and managing the NVIDIA vGPU software license server
involve basic Windows OS administration tasks such as setting system variables or adding a
path to the Path system variable.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 113
Basic Windows OS Administration Tasks
4. In the Environment Variables window that opens, under System variables, click New.
Note: Ensure that you click New under System variables, not under User variables.
5. In the New System Variable window that opens, type name of the system variable in the
Variable name field and the value in the Variable value field and click OK.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 114
Basic Windows OS Administration Tasks
The following table shows names and sample values to type for setting the location of the
JRE libraries and executable files, the location of the trusted storage database, and the
base URL for the nvidialsadmin utility.
Item Variable name Variable value Example
The location of the JAVA_HOME C:\Program Files\ojdkbuild\java-1.8.0-
JRE libraries and openjdk-1.8.0.212-1\jre
executable files
The location of the TRUSTED_STORAGE_DIR C:\Windows\ServiceProfiles
trusted storage \NetworkService\flexnetls\nvidia
database
The base URL for FLEXNETLS_BASEURL http://gridlicense1.example.com:7070/
the nvidialsadmin api/1.0/instances/~
utility
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 115
Basic Windows OS Administration Tasks
6. In the Environment Variables window, click OK and then in the System Properties window,
click OK.
1. Click the magnifying glass in the toolbar and in the search box type environment.
2. When Edit the system environment variables appears in the search results, click Open.
3. In the Advanced tab of the System Properties window that opens, click Environment
Variables.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 116
Basic Windows OS Administration Tasks
4. In the Environment Variables window that opens, under System variables, select Path and
click Edit.
Note: Ensure that you select Path and click Edit under System variables, not under User
variables.
5. In the Edit environment variable window that opens, determine whether the path that you
want to add is already listed, for example, C:\Program Files\ojdkbuild\java-1.8.0-
openjdk-1.8.0.242-1\bin for the path to the java.exe executable file.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 117
Basic Windows OS Administration Tasks
6. In the Environment Variables window, click OK and then in the System Properties window,
click OK.
1. Click the magnifying glass in the toolbar and in the search box type environment.
2. When Edit the system environment variables appears in the search results, click Open.
3. In the Advanced tab of the System Properties window that opens, click Environment
Variables.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 118
Basic Windows OS Administration Tasks
4. In the Environment Variables window that opens, under User variables, select the variable
that you want to delete, and click Delete.
5. In the Environment Variables window, click OK and then in the System Properties window,
click OK.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 119
Basic Windows OS Administration Tasks
1. Click the magnifying glass in the toolbar and in the search box type environment.
2. When Edit the system environment variables appears in the search results, click Open.
3. In the Advanced tab of the System Properties window that opens, click Environment
Variables.
4. In the Environment Variables window that opens, under User variables, select Path and
click Edit.
5. In the Edit environment variable window that opens, select the path to the java.exe
executable file, for example, C:\Program Files\ojdkbuild\java-1.8.0-
openjdk-1.8.0.201-1\bin, and click Delete.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 120
Basic Windows OS Administration Tasks
6. In the Environment Variables window, click OK and then in the System Properties window,
click OK.
Virtual GPU Software License Server Version 2021.07 DU-07754-001 _v2021.07 | 121
Notice
This document is provided for information purposes only and shall not be regarded as a warranty of a certain functionality, condition, or quality of a product. NVIDIA
Corporation (“NVIDIA”) makes no representations or warranties, expressed or implied, as to the accuracy or completeness of the information contained in this
document and assumes no responsibility for any errors contained herein. NVIDIA shall have no liability for the consequences or use of such information or for any
infringement of patents or other rights of third parties that may result from its use. This document is not a commitment to develop, release, or deliver any Material
(defined below), code, or functionality.
NVIDIA reserves the right to make corrections, modifications, enhancements, improvements, and any other changes to this document, at any time without notice.
Customer should obtain the latest relevant information before placing orders and should verify that such information is current and complete.
NVIDIA products are sold subject to the NVIDIA standard terms and conditions of sale supplied at the time of order acknowledgement, unless otherwise agreed
in an individual sales agreement signed by authorized representatives of NVIDIA and customer (“Terms of Sale”). NVIDIA hereby expressly objects to applying any
customer general terms and conditions with regards to the purchase of the NVIDIA product referenced in this document. No contractual obligations are formed
either directly or indirectly by this document.
NVIDIA products are not designed, authorized, or warranted to be suitable for use in medical, military, aircraft, space, or life support equipment, nor in applications
where failure or malfunction of the NVIDIA product can reasonably be expected to result in personal injury, death, or property or environmental damage. NVIDIA
accepts no liability for inclusion and/or use of NVIDIA products in such equipment or applications and therefore such inclusion and/or use is at customer’s own risk.
NVIDIA makes no representation or warranty that products based on this document will be suitable for any specified use. Testing of all parameters of each product
is not necessarily performed by NVIDIA. It is customer’s sole responsibility to evaluate and determine the applicability of any information contained in this document,
ensure the product is suitable and fit for the application planned by customer, and perform the necessary testing for the application in order to avoid a default of
the application or the product. Weaknesses in customer’s product designs may affect the quality and reliability of the NVIDIA product and may result in additional
or different conditions and/or requirements beyond those contained in this document. NVIDIA accepts no liability related to any default, damage, costs, or problem
which may be based on or attributable to: (i) the use of the NVIDIA product in any manner that is contrary to this document or (ii) customer product designs.
No license, either expressed or implied, is granted under any NVIDIA patent right, copyright, or other NVIDIA intellectual property right under this document.
Information published by NVIDIA regarding third-party products or services does not constitute a license from NVIDIA to use such products or services or a warranty
or endorsement thereof. Use of such information may require a license from a third party under the patents or other intellectual property rights of the third party,
or a license from NVIDIA under the patents or other intellectual property rights of NVIDIA.
Reproduction of information in this document is permissible only if approved in advance by NVIDIA in writing, reproduced without alteration and in full compliance
with all applicable export laws and regulations, and accompanied by all associated conditions, limitations, and notices.
THIS DOCUMENT AND ALL NVIDIA DESIGN SPECIFICATIONS, REFERENCE BOARDS, FILES, DRAWINGS, DIAGNOSTICS, LISTS, AND OTHER DOCUMENTS
(TOGETHER AND SEPARATELY, “MATERIALS”) ARE BEING PROVIDED “AS IS.” NVIDIA MAKES NO WARRANTIES, EXPRESSED, IMPLIED, STATUTORY, OR
OTHERWISE WITH RESPECT TO THE MATERIALS, AND EXPRESSLY DISCLAIMS ALL IMPLIED WARRANTIES OF NONINFRINGEMENT, MERCHANTABILITY, AND
FITNESS FOR A PARTICULAR PURPOSE. TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL NVIDIA BE LIABLE FOR ANY DAMAGES, INCLUDING
WITHOUT LIMITATION ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, HOWEVER CAUSED AND REGARDLESS OF
THE THEORY OF LIABILITY, ARISING OUT OF ANY USE OF THIS DOCUMENT, EVEN IF NVIDIA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Notwithstanding any damages that customer might incur for any reason whatsoever, NVIDIA’s aggregate and cumulative liability towards customer for the products
described herein shall be limited in accordance with the Terms of Sale for the product.
VESA DisplayPort
DisplayPort and DisplayPort Compliance Logo, DisplayPort Compliance Logo for Dual-mode Sources, and DisplayPort Compliance Logo for Active Cables are
trademarks owned by the Video Electronics Standards Association in the United States and other countries.
HDMI
HDMI, the HDMI logo, and High-Definition Multimedia Interface are trademarks or registered trademarks of HDMI Licensing LLC.
OpenCL
OpenCL is a trademark of Apple Inc. used under license to the Khronos Group Inc.
Trademarks
NVIDIA, the NVIDIA logo, NVIDIA GRID, NVIDIA GRID vGPU, NVIDIA Maxwell, NVIDIA Pascal, NVIDIA Turing, NVIDIA Volta, Quadro, and Tesla are trademarks or
registered trademarks of NVIDIA Corporation in the U.S. and other countries. Other company and product names may be trademarks of the respective companies
with which they are associated.
Third-Party Software
This NVIDIA product contains third party software that is made available under their respective software licenses.
Copyright
© 2013-2021 NVIDIA Corporation & affiliates. All rights reserved.
NVIDIA Corporation | 2788 San Tomas Expressway, Santa Clara, CA 95051
http://www.nvidia.com