Access Control

On the "Configuration | Access Control" page you define settings managing the client access to CodeMeter License Server.

CodeMeter WebAdmin – "Configuration | Access Control“

Figure 38: CodeMeter WebAdmin - "Configuration | Access Control“

Element

Description

Clients

Shows a list of all client PCs which have the privilege to use CodeMeter License Server, i.e. to allocate a license.

information_grau_klein26

When this list is empty, each CodeMeter® client on the network is able to use CodeMeter License Server. This is the default setting.

To add a new client to the client list, please proceed as follows:

1.

Click the "add" button.
A prompt dialog displays.

wadmin_einstellungen_zugriffsschutz_hinzufuegen_02

2.

Specify the PC name or the IP address of the client in the dialog.

3.

Click the "OK" button.
The PC is now added to the client list.

To remove a client from the list, please proceed as follows:

1.

Click the "remove" button.
The PC is now removed from the client list

Access FSB

When you own a CodeMeter® Firm Security Box (FSB), this option activates the sharing of the FSB on the network. Then the FSB is able to be used by several users, for example, to program CmContainer or automatically protect applications.

information_grau_klein26

This option makes sense only for CodeMeter® licensee with an individual CodeMeter® Firm Code.

Click the "Apply" button to save the changes you have made. By a previous click on the "Default" button you save the default settings. Then the client list is empty, and the FSB is not available on the network.

information_grau_klein26

When you define access settings, in some cases, this requires the restart of the CodeMeter® service. However, you do not have to eject or deactivate the CmContainer. After you specified the settings you are able to stop and then restart the CodeMeter® service in CodeMeter Control Center. For non-Windows operating systems see here.

Additional access control of client list via whitelist and Blacklist

Alternatively, you also have the option to create a white or blacklist for the access of clients. This so-called profiling you conduct for different operating systems at the following locations:

Operating System

Profile Creation

WIN Windows

Registry entry in HKLM/SOFTWARE/WIBU-SYSTEMS/CodeMeter/Server/CurrentVersion

MacOS  Mac OS

/Library/Preferences/com.wibu.CodeMeter.Server.ini

LINUX Linux

/etc/wibu/CodeMeter/Server.ini.

SUN Solaris

/etc/opt/CodeMeter/Server.ini

The generation of the profile for CodeMeter License Server comprises the following versions (CodeMeter.exe, CodeMeterMacX, CodeMeterLin, CodeMeterSun),

information_weiss_klein26

When you edit the *.ini files in the case of Mac OS, Linux and Sun, you must stop the service CodeMeter License Server before. Otherwise, changes you have been made do not apply.

Parameter

Description

Client<index>=<Subnetz>[,<serial>[,FC[,PC]]]] (Whitelist)

Whitelist:
These parameters hold the IP addresses of client PCs on the network which have the privilege to access the local CodeMeter License Server. When the IP address of a client is not on this list, the access is denied.

If no whitelist exists, no other restrictions apply. The specification of subnets is possible.

The syntax is as follows:
Client<index>=<Subnetz>[,<serial>[,FC[,PC]]]

The serial number has to follow the pattern MaskByte-Serial Number (e.g. 1-1179681).

Example:

Client1=192.168.0.0/24,1-123456,10,13

this addresses all computer ranging from 192.168.0.0 to192.168.0.255 (Class C). Usually are also /8 (Class A) and /16 (Class B).

The serial number, FC, and PC are optional.

information_grau_klein26

This whitelist corresponds to the client list in CodeMeter WebAdmin.

Client<index>=<Subnetz>[,<serial>[,FC[,PC]]]]
[SZ, optional]

Blacklist:
These parameters hold the IP addresses of client PCs on the network which have no privilege to access the local CodeMeter License Server. When an IP address of a client is on this list, the access is denied.

If no blacklist exists, no other restrictions apply.

The syntax is as follows:
Client<index>=<Subnetz>[,<serial>[,FC[,PC]]]

The serial number has to follow the pattern MaskByte-Serial Number (e.g. 1-1179681).

Example:

Client1=192.168.0.0/24,1-123456,10,13

this addresses all computer ranging from 192.168.0.0 to192.168.0.255 (Class C). Usually are also /8 (Class A) and /16 (Class B).

The serial number, FC, and PC are optional.