1. Introduction

  2.  Welcome
  3.  License manager basics
  4. Getting Started

  5.  ArcGIS License Manager system requirements
  6.  Supported software products
  7.  License manager installation and startup
  8.  Client machine setup using the ArcGIS Administrator
  9.  Existing users
  10. Administering the License Manager

  11.  Using the ArcGIS License Server Administrator
  12.  Starting and stopping the License Manager
  13.  Checking the license server status
  14.  Configuring license borrowing
  15.  Viewing the audit log
  16.  Viewing license availability
  17.  Authorizing additional features
  18.  Diagnosing errors
  19. ArcGIS License Manager with ArcGIS Enterprise

  20.  Introduction to ArcGIS License Manager with ArcGIS Enterprise Portal
  21.  Configure License Manager for use with ArcGIS Enterprise Portal
  22.  Useful information and best practices
  23. Advanced Topics

  24.  Automatically starting the License Manager
  25.  Defining port@host to one or more license servers
  26.  Backup license servers
  27.  Configure ArcGIS License Manager to work through a firewall
    1. The Options File

    2.  Using the Options file
    3.  ACTIVATION_EXPIRY_DAYS
    4.  DEBUGLOG
    5.  EXCLUDE
    6.  EXCLUDE_ENTITLEMENT
    7.  EXCLUDEALL
    8.  GROUP
    9.  GROUPCASEINSENSITIVE
    10.  HOST_GROUP
    11.  INCLUDE
    12.  INCLUDE_ENTITLEMENT
    13.  INCLUDEALL
    14.  MAX
    15.  NOLOG
    16.  RESERVE
    17.  Feature names for ArcGIS Option file
  28.  Transferring licenses from one License Manager to another
  29.  Using the license manager on Windows Terminal Server/Citrix
  30.  Enterprise deployment of the ArcGIS Desktop or ArcGIS Engine licenses
  31.  Provisioning files
  32.  Silent authorization commands
  33. Troubleshooting

  34.  Incorrect clock setting
  35.  Cannot connect to the License Manager
  36. Glossary

  37.  ArcGIS Administrator
  38.  ArcGIS License Manager
  39.  authorization
  40.  borrow
  41.  Concurrent use
  42.  daemon
  43.  debug log file
  44.  feature
  45.  license
  46.  License Manager
  47.  license server
  48.  named user
  49.  ArcGIS Enterprise Portal
  50.  provisioning file
  51.  Return
  52.  simultaneous session
  53.  Single use
  54.  Software Authorization Wizard

Configure ArcGIS License Manager to work through a firewall

Many of today's networks use a firewall for enhanced security from outside threats. Because the license manager uses the TCP/IP protocols, implementing such a firewall can pose problems between the license manager server and the clients connecting to it.

The problem is caused by the firewall often closing or blocking access to the ports the license manager uses to communicate. By default, the LMGRD daemon is set to TCP port 27000. The ARCGIS daemon, on the second line of the file, is not confined to a particular port range. It is dynamic, meaning that it can listen on any available TCP port. The License manager does not communicate over UDP.

To secure the license management environment and allow you to implement a firewall, you can lock the ARCGIS daemon to a specific port. You can also change the lmgrd daemon from the default 27000 to another port between 27000 and 27009. This range was pre-specified for license manager use because of the low traffic in that range.

This topic does not explain the procedures required to open your hosts firewall. Please refer to your firewall and operating system help documentation on opening ports.

Procedure for locking License Manager to specific ports

The steps provided require that you briefly stop the license manager. During this time, connections to the license manager may be lost.

  1. Click Start > Programs > ArcGIS > License Server Administrator.
  2. Click Start/Stop License Server in the table of contents and click Stop.
  3. Open Windows Explorer and navigate to your license manager installation location (C:\Program Files\ArcGIS\LicenseManager\bin by default for ArcGIS License Manager 2021.0 and newer installations), in which you will see a service.txt file.

    The file should look similar to this:

    SERVER this_host ANY 27000
    VENDOR ARCGIS
    USE_SERVER
    FEATURE ACT ARCGIS 1 permanent 1 vendor_info=7KNJDRHFHBK4CFDMJ214 SIGN="052E ABFC 32DD \
    	2473 DEFD E276 4BF3 E0DB 87EB 2203 5A30 C014 19A1 C35E 2154 \
    	08B1 9460 A2B9 6701 DC4D CAF2 E2FE 1347 0E36 90FA 4F3B E864 \
    	BEC8 D3A2 A615"

At the end of the SERVER line, you can choose to specify a port number for the lmgrd daemon, immediately after ANY (separated with a space).

On the VENDOR line, add PORT=####, where #### is a specific port number designated by you, to lock the vendor daemon to that specific port (for example, 5152). After making the changes, your service.txt file should look something like this:

SERVER this_host ANY 27004		
VENDOR ARCGIS PORT=5152
USE_SERVER
FEATURE ACT ARCGIS 1 permanent 1 vendor_info=7KNJDRHFHBK4CFDMJ214 SIGN="052E ABFC 32DD \
	2473 DEFD E276 4BF3 E0DB 87EB 2203 5A30 C014 19A1 C35E 2154 \
	08B1 9460 A2B9 6701 DC4D CAF2 E2FE 1347 0E36 90FA 4F3B E864 \
	BEC8 D3A2 A615"

  1. Save the .txt file.
  2. From License Server Administrator, click Start.

    The vendor daemon is now static, locked to the port specified.

  3. These ports can now be saved as exceptions in the firewall to allow communication between the license server and the client.
NoteNote:

With ArcGIS License Manager 10.3 and later, you must specify a port in the range 27000-27009 for the lmgrd daemon to use with an ArcGIS Enterprise Portal. The service.txt file found in the installation directory (..\Program Files\ArcGIS\LicenseManager\bin by default for 2021.0 and newer installations) will now include the port 27000 by default after installing ArcGIS License Manager. If ArcGIS License Manager 2024.0 was installed as an upgrade from an earlier version, for example after ArcGIS License Manager 10.2.2 and a port such as 27004 was already specified in the earlier installation, this port may not be carried over into the new installation. In this case, you must manually re-enter the port into the service.txt file. If upgrading from ArcGIS License Manager 10.3-10.6 or ArcGIS License Manager 2018.0-2023.0 to ArcGIS License Manager 2024.0, then the port information in the service.txt file will be retained. The lmgrd daemon port is communicated to the ArcGIS Enterprise Portal as part of the exported portal configuration *.json file.

When operating ArcGIS License Manager on the same host server as another vendor's Flexnet enabled license server, each LMGRD daemon should be locked to a different port in the 27000-27009 range to avoid conflicts in serving licenses.

For details on configuring an ArcGIS Enterprise Portal to work through a firewall and for other security best practices, please also refer to the ArcGIS Enterprise help documentation.