Registry Keys for Inventory Beacon

String

The folder where inventory collected from Active Directory is stored. On an inventory beacon, upload of the Active Directory data is triggered as soon as collection is completed.

This inventory is reflected throughout for use in identifying users and devices.

String

The folder used for staging uploads of status information, primarily on the execution of discovery and inventory rules.

This inventory is reflected in the activity results, for example when you expand details of a rule on the Rules tab of Discovery and Inventory Rules page.

Anonymous—User name and password are not required.

Controls the authentication type of the proxy server.

Users can modify this key by using the Proxy connection dialog in the FlexNet Beacon interface.

%CommonAppData%\Flexera Software\Beacon

[Registry]\Beacon\CurrentVersion

String

For a top-level inventory beacon, this is the URL of the compliance server that this inventory beacon communicates with. For a child inventory beacon further down the hierarchy, this is the URL for its parent inventory beacon. The URL is used for services including uploading packages, and downloading the current importer configuration files.

This value is visible in the FlexNet Beacon interface as Beacon configuration > Parent connection > Parent URL .

Important:DO NOT edit this value manually in the registry, nor in the FlexNet Beacon interface. If you do so, authentication at the compliance server will fail. This value is set for each inventory beacon within the beacon configuration file downloaded from the central application server, and should not be edited.

inventory-beacons

[Registry]\Beacon\CurrentVersion

Encrypted string

The password used by the inventory beacon to communicate with the application server endpoint. If this inventory beacon is a child in a hierarchy that reports to another inventory beacon, the password is used for these communications.

Tip:If a parent inventory beacon is running the built-in web server (and supporting anonymous authentication for communication with UNIX-like inventory devices), the password may correctly be empty.

For a top-level inventory beacon reporting directly to the central application server, the presence of the password (obscured) is visible in the FlexNet Beacon interface under Beacon configuration > Parent connection > Password.

Important:DO NOT edit this value manually either in the registry or in the FlexNet Beacon interface. If you do so, authentication at the application server will fail. Passwords (and matching user names) for top-level inventory beacons are automatically generated by the IT Asset Management application server and downloaded within the inventory beacon configuration file. To change the BeaconServicesPassword for such a case, download a new configuration file.

For a child inventory beacon that reports to a parent inventory beacon, insert here the password for the account you created on the parent to run the web service that manages these communications (unless you are using anonymous authentication, in which case leave the Password field empty).

None

[Registry]\Beacon\CurrentVersion

String

The staging folder for data on the current status of the FlexNet Beacon software on the inventory beacon.

Accessible in Data Collection > IT Assets Inventory Tasks > Beacons.

120

Tip:This default applies when the key is not present in the registry. To change to a different value, create the registry key and supply your changed value.

[Registry]\Beacon\CurrentVersion

String (Boolean case-insensitive literals true or false)

When transferring data between an inventory beacon and the application server using the HTTPS protocol, a web server certificate is applied to the data being transferred. When receiving web server certificates from servers, the appropriate agent checks the CA (certification authority) server to ensure that the certificates are not on the CRL (certificate revocation list). If an agent cannot check the CRL (for example, the CA server is firewalled and cannot be contacted, or a proxy server prevents access), the system can stall. To avoid this stalling, you can add the Common\CheckCertificateRevocation preference and set it to False to prevent code agents performing the CRL check.

Important:This approach is "for emergency use only" and is not recommended practice for normal operation. Failing to check for certificate revocation introduces a security weakness that is unacceptable in most operational environments.

Tip:OCSP Stapling is not supported.

This preference is not normally present in the registry, with default behavior specified in the FlexNet Beacon code. You can manually add the preference to the registry when it is needed.

Not applicable.

True (when preference is absent from registry).

[Registry]\Common

String (integer)

Specifies the number of seconds to spend in an attempt to establish a connection from the inventory beacon to a domain controller before a timeout. This value is relevant only to the collection of Active Directory information for import to IT Asset Management. (This key maps to the LdapConnection.Timeout setting in the Microsoft API.)

Not applicable.

[Registry]\RemoteExecution\CurrentVersion

String

The path used to store the customized version of the importer configuration files.

Not applicable.

Flexera_FlexNetBeacon

[Registry]\PasswordStore

String (Boolean case-insensitive literals true or false)

Records the discovery of the CyberArk Credential Provider in the expected installation path.

When this setting is true, the Password management tab of the FlexNet Beacon interface displays details needed for integration with CyberArk; and the local Password Manager includes an option to select the Vault.

300 (this value of 300 seconds is used when the CyberArkVaultRetryTime key is not specified in the registry).

[Registry]\PasswordStore

Int 32

Relevant only when CyberArk Credential Provider is installed on this inventory beacon, so that credentials may be retrieved from a CyberArk Vault. As a parameter attached to credential requests, it specifies the amount of time that the CyberArk Credential Provider should wait for a response from the central CyberArk Vault before issuing a time-out error.

Not applicable.

-PI (default behavior in code, not visible in the registry)

Specifies the options passed to MgsIPScan and used in scanning the network to discover devices. (MgsIPScan is a customized version of nmap.) The default value uses an ICMP ping sweep of the network to identify devices for further testing. To turn off the ping sweep, you must add the optional value -PS to the registry key listed below (when passed through to MgsIPScan, this switches from a ping sweep to a TCP SYN/ACK scan). Turning off the ping sweep has the side effect of slowing down the port scans that also form part of the discovery process.

Note:If you have multiple inventory beacons and wish to prevent ping sweeps, you should create this registry setting on all inventory beacons.

Modifies the network scanning behavior enabled by the Network scan check box (in the Discovery and Inventory Rules page and click the Actions tab, when creating or editing an action in the Discovery of devices section).

-PN (default behavior in code, not visible in the registry)

This option is passed only to the MgsIPScan command line used on known discovered devices, the list of which has been automatically downloaded from the central application server to the inventory beacon. The default value turns off the ping sweep (switching to a TCP NULL scan), so that no host discovery is attempted. The resulting command line then applies the required port scanning options to the known discovered devices, assuming that these discovered hosts are online.

Modifies the discovery behavior enabled with the Use previously discovered devices check box (in the Discovery and Inventory Rules page and click the Actions tab, when creating or editing an action, in the Discovery of devices section). This setting causes the distinct MgsIPScan command line to be applied to known discovered devices.

-sS (default behavior in code, not visible in the registry)

This option is passed to the MgsIPScan command lines used for both discovery of new devices and port scanning on known discovered devices. The default value attempts a TCP SYN scan, while the optional value attempts an ACK scan. This sets the behavior of the inventory beacon in applying the port scanning rules received in beacon policy from the central application server. The same scanning method is used for all the different port scanning settings.

Modifies the port scanning behavior enabled on the Actions tab of the Discovery and Inventory Rules page, when creating or editing an action, with the following settings:

-sU (default behavior in code, not visible in the registry)

This option is passed to the MgsIPScan command lines used for both discovery of new devices and port scanning on known discovered devices. The default value attempts a UDP scan. A typical use case is to set this to an empty string, which turns off the UDP scan.

Modifies the port scanning behavior enabled on the Actions tab of the Discovery and Inventory Rules page, when creating or editing an action, with the following settings:

False

[Registry]\Common\ReplicationSettings

String

When attempting to gather Oracle inventory from a large number of databases (10K+), there is the possibility of the BeaconEgine.exe process crashing due to memory issues. To address this issue, you can execute the Oracle inventory process externally using FlxRemoteExecutionLauncher.exe, separate from the BeaconEngine.exe process. This approach allows memory to be returned to the system after the completion of each Oracle inventory task. If the ExternalProcessExecution registry entry is not present, the Oracle inventory process will continue to be executed within BeaconEngine.exe, as previously established.

Not applicable.

gz, txt, xml, log, ndi, disco, msa, mmi, rea, red, rer, rev, taskstatus, mss, msel, vdi 

[Registry]\Common\ReplicationSettings

String (Boolean case-insensitive literals true or false)

Controls whether the inventory beacon will attempt to connect to an application server for uploading data packages and downloading importer configuration files.

Reflects the setting Enable parent connection on the Parent connection tab of the FlexNet Beacon interface.

https://app.flexera.com 

https://app.flexera.eu 

https://app.flexera.au 

[Registry]\Beacon\CurrentVersion

String (Boolean case-insensitive literals true or false)

Suppresses the presentation of confirmation dialogs in the FlexNet Beacon interface.

Set to True when an operator selects Do not show me this again in any confirmation dialog for an inventory or business import, or any rule, in the Inventory Agent interface.

This single setting affects the confirmation dialogs for all local executions at once. The value may be reset (so that all confirmation dialogs are displayed again) by opening the system menu on the inventory beacon (top left corner) and choosing Restore notification defaults; or by setting this key to False, or removing the key from the registry.

%CommonAppData%\Flexera Software\Compliance\ ImportProcedures\Inventory

[Registry]\Compliance\CurrentVersion

String

The folder where log files from the Launcher (ndlaunch.exe) are staged for upload. This is a code component of the Inventory Agent.

Not applicable.

%ProgramData%\Flexera Software\Replication

[Registry]\Common\ReplicationSettings

String

The path used to store logging configuration and the log files generated by each process.

Not applicable.

60 seconds (on Windows platforms) 0 (on UNIX-like platforms) – no maximum age by default

[Registry]\Uploader\CurrentVersion

Maximum number of uploads attempted on a persistent HTTP/HTTPS connection before requesting a new connection. Special case of "0" means no maximum (that is, reuse the same connection continuously).

Tip:Works with MaxKeepAliveLifetime: when either limit is reached, both counters are reset.

Not applicable.

3 (this value is used when the MaxQueryAttempts key is not specified in the registry).

[Registry]\ActiveDirectoryImporter\CurrentVersion

DWORD

The maximum age, in days, that a package may be kept on the inventory beacon before it is deleted.

Not applicable.

600 (ten minutes)

[Registry]\Uploader\CurrentVersion

String (integer)

When the inventory beacon is managing remote execution tasks (such as adoption, remote inventory collection from a general target device, direct collection of inventory from an Oracle database instance, collection of VMware or XenDesktop inventory, and so on), this preference sets the maximum number of these high-level tasks that may be initiated at a time. When this maximum is reached, one of the current tasks must be completed before the next queued task may be commenced.

This registry key is not present by default, in which case the same default value is automatically applied. You may override the default by creating the registry key and giving it a different integer value.

Tip:If you create the registry key and the value is corrupted, or evaluates to zero, only a single task is undertaken at a time, and each task must be completed before the next is commenced.

Not applicable.

1000 (this value is used when the PageSize key is not specified in the registry).

[Registry]\ActiveDirectoryImporter\CurrentVersion

String

Specifies the password used for the proxy server connection configured as the Basic authentication type.

Users can modify this key by using the Proxy connection dialog in the FlexNet Beacon interface.

[Registry]\Reporter\CurrentVersion\IncomingDirectory

String

If the inventory beacon must access the central application server through a proxy, this registry key can be added to identify the protocol, server URL, and port number, using this format:

protocol://proxyServerURL:portNumber 

The proxyServerURL placeholder may be replaced with the fully-qualified host name, or with an IP address. For example:

https://proxy14.tmnis.org:443

http://194.66.82.14:443

Since (typically) the same proxy server controls both uploads and downloads between the inventory beacon and application server, this setting is normally kept in sync with the value in Common\UploadSettings\ReplicatorParent\Proxy.

(Strictly, the ReplicatorParent may refer to a parent inventory beacon in a hierarchy; but typically proxies are required only for those accessing the central application server.)

Not applicable.

None (by default, this registry key does not exist, and is added only when required).

Tip:If this registry key is not defined and a proxy is in use, the setting in Common\ProxySettings is used.

[Registry]\Common\UploadSettings\ReplicatorParent

String (Boolean case-insensitive literals true or false)

Controls whether the proxy server connection is enabled or disabled on the inventory beacon.

When this setting is true, the ProxySettings property is enabled and users can configure the ProxySettings property by using the Proxy connection dialog in the FlexNet Beacon interface.

None

[Registry]\Common\ProxySettings

String

Specifies the share used for Zero-footprint inventory collection, driven by the inventory beacon. From this folder, the mgsreservice service on a target inventory device executes ndtrack.exe (for Windows); or the FlexNet Beacon engine downloads ndtrack.sh (for UNIX-like platforms). This key is set by the inventory beacon installer, and should not be altered or removed.

Not applicable.

%ProgramData%\Flexera Software\Incoming\ RemoteApplication

[Registry]\Reporter\CurrentVersion\IncomingDirectory

Deprecated

Not applicable

C:\ProgramData\Flexera Software\Repository

[Registry]\Repository\CurrentVersion

String (integer)

The length of time, specified in seconds, to wait for results to be returned from a request for Active Directory data. For a request that produces multiple pages of data (see PageSize), this is the time allowed for each page of data to be returned.

Not applicable.

7

[Registry]\Common\ReplicationSettings

Deprecated

Not applicable.

True

[Registry]\Uploader\CurrentVersion

Or, with less specificity:

[Registry]\Common

String (integer)

The Active Directory query can use the Lightweight Directory Access Protocol (LDAP) through a Secure Sockets Layer (SSL) link to communicate with the domain controller, for which this is the port number. This setting applies to the LDAP connection, and for more information see LdapDirectoryIdentifier.PortNumber Property.

Note:Use of LDAP over SSL requires that you have set the Use SSL check box in the Active Directory page of the FlexNet Beacon user interface. For details, see Importing From Active Directory. If this check box is clear on an inventory beacon that is gathering Active Directory data, any value for this key is ignored.

Not applicable.

Staging

[Registry]\Beacon\CurrentVersion

String

The folder where uploaded status files are stored.

Results from these files are visible through the System Health page.

None

[Registry]\Common

String (integer)

When the inventory beacon initiates any remote execution task on a target inventory device (such as adoption or inventory collection), but no response is received within the number of seconds specified in this preference, the remote execution task times out and is logged as a failure. This registry key is not present by default, in which case the same default value is automatically applied. You may override the default by creating the registry key and giving it a different integer value.

Not applicable.

%ProgramData%\Flexera Software\Incoming\Inventories

[Registry]\Reporter\CurrentVersion\IncomingDirectory

String

Sets the interval in which inventory beacon servers check for updated discovery and inventory rules. The value indicates the number of minutes that are to pass between each check for rules. The interval can be from 1 to 60 minutes. (Values outside the acceptable range default to 1 minute.)

Not applicable.

%ProgramData%\Flexera Software\Incoming\UsageData

[Registry]\Reporter\CurrentVersion\IncomingDirectory

String

Specifies the user name used for the proxy server connection configured as the Basic authentication type.

Users can modify this key by using the Proxy connection dialog in the FlexNet Beacon interface.

%ProgramData%\Flexera Software\Incoming\VdiAccess

[Registry]\Reporter\CurrentVersion\IncomingDirectory

String (Boolean case-insensitive literals true or false)

When an SSL connection to the Active Directory domain controller has been specified (see SSLPort for more details), VerifyServerCertificate determines whether the security certificate for the connection should be validated. This setting applies only to the collection of Active Directory data, and has no bearing on the use of security certificates for communications between the Inventory Agent and an inventory beacon (for details of which see Gathering FlexNet Inventory).

Not applicable.

Ready 

[Registry]\Beacon\CurrentVersion