License setup

Choose one of the following three license setup options based on your deployment model:

Deployment Model	Internet Connectivity	Recommended Option
Fixed or dynamic configuration	Available	Cloud license service
Fixed configuration with known servers	Not Available	Node-locked license file
Dynamic configuration with containers or Kubernetes	Not Available	Local license server

Cloud license service

Use a cloud license service (CLS) to run Pentaho software on machines that have internet connectivity.

When to choose a CLS

Choose a CLS if your environment meets the following conditions:

• Has stable outbound internet connectivity.
• Does not require locally managed license files or licensing infrastructure.

How CLS works

1. You receive a license URL in an activation email from Pentaho Support.
2. You apply the license URL to activate your Pentaho software.
3. Pentaho validates the license online when you startup Pentaho software and during scheduled checks.

Apply your license

For instructions on applying a license URL from a CLS to activate your Pentaho software, see Apply a license URL.

Node-locked license file

Use a node-locked license to run Pentaho software fully offline. A node-locked license ties Pentaho software to a single designated node, which can be a physical or virtual machine.

When to choose a node‑locked license

• Your systems are in a locked‑down network with no or limited internet access.
• Your infrastructure is static (no frequent hardware changes, no ephemeral instances).

How a node-locked license works

1. You retrieve the <hostid> for the node where you installed Pentaho software.
2. You provide the <hostid> to Pentaho Support.
3. Pentaho Support uses the <hostid> to generate a license file that is tied to the node and specifies the licensed features and CPU core count.
4. Pentaho Support sends the node-locked license file to you.
5. You apply the node-locked license file to activate your Pentaho software on the associated node.

Note: A node-locked license file can be used only on the associated node. To install Pentaho on another node, you must obtain a new license file.

Apply your license

For instructions on applying a node-locked license to activate your Pentaho software, see Apply a node-locked license.

Local license server

Use a local license server (LLS) if your environment cannot reach the CLS and node-locked license files are impractical due to dynamic deployments.

Note: An LLS cannot be deployed within a Docker container.

Why an LLS is needed

In containerized or orchestrated deployments such as Docker or Kubernetes:

• Containers or nodes are frequently recreated and do not have a persistent identity.
• Hardware identifiers are transient, which makes node-locked licensing unsuitable.
• Capacity scales dynamically based on workload, which requires flexible license allocation.

When to choose an LLS

• Your environment cannot reach the CLS.
• You run Pentaho instances in containers or Kubernetes.
• Your environment is elastic, adding or removing capacity frequently.
• You cannot use a node-locked license but still need offline licensing.

How an LLS works

1. You deploy and activate an LLS in your environment.
2. Your Pentaho instances connect to the LLS to obtain a license that specifies the licensed features and CPU core count. When you stop or remove a Pentaho instance, the license is made available for other Pentaho instances.

Apply your license

For instructions on applying a license URL from an LLS to activate your Pentaho software, see Apply a license URL.

Install and manage an LLS

The LLS manages Pentaho license entitlements and related admin tasks and is deployed within your environment.

During setup, you get a license URL that products use to connect. Example: http://<server_ip_address>:7070/api/1.0/instances/~.

To avoid downtime, consider configuring license server failover to a backup license server. See Revenera License Server Failover.

Requirements for an LLS

• CPU: 2 GHz, 2 cores
• RAM: 4 GB
• Disk: 200 MB
• Set JAVA_HOME.
• Open port 7070.

You also need:

• Linux: sudo privileges for installation and service management.
• Windows: Administrator privileges for service management.

If you enable SSL, open port 1443. See Set up a self-signed certificate for an LLS.

Install an LLS on Linux

To use Pentaho software, a user must have a valid license in a CLS or LLS that can be verified by the license manager.

If you cannot access a cloud license service, install an LLS behind your firewall.

The LLS is a command-line tool. It activates acquired licenses and performs administrative tasks.

You can install the LLS on the same server or VM that hosts the Pentaho Server. It requires limited resources.

Before you begin

If you are installing on Red Hat Linux with FIPS mode enabled, configure Java:

• Configuring Red Hat build of OpenJDK 11 on RHEL with FIPS
• Configuring Red Hat build of OpenJDK 17 on RHEL with FIPS

Install an LLS and activate license on Linux

1. Download the LLS file from the Support Portal.

   1. Sign in with the support credentials from your Pentaho Welcome Packet.
   2. In the Pentaho card, select Download.
   3. In the 11.0 list, select Pentaho 11.0 GA Release.
   4. Scroll to the bottom of the release page.
   5. Go to Utilities and Tools/Local License Server.
   6. Download the license server file, enterprise-local-license-server-11.0.0.0-<build version>.tar.gz.
2. Set permissions for the license server.

   • For enterprise-local-license-server-11.0.0.0-<build version>.tar.gz:

     chmod 777 enterprise-local-license-server-11.0.0.0-<build_version>.tar.gz

3. Extract the enterprise-local-license-server-11.0.0.0-<build_version>.tar.gz file:

   • tar -xvzf enterprise-local-license-server-11.0.0.0-<build_version>-linux-<jdk_version>.tar.gz -C <destination_folder>

4. Go to the server directory.

   cd /<destination_folder>/enterprise-local-license-server/server

5. Run the installer.

   • If Java can use the default temp directory:

     sudo ./install-systemd.sh

   • If access to Java's temp directory is restricted:

     sudo ./install-systemd.sh --tmpdir=<full_path_to_temp_directory>

     You can also configure this later. See Change the Java temporary directory on Linux.
6. If prompted with Install VMUUID license daemon?, choose:

   • y for a VM
   • n for physical hardware

   Note: This prompt can appear for Java version 2025.02.0 or newer.
7. Start the service.

   sudo systemctl start flexnetls-pentaho

8. Go to the enterprise admin tools directory.

   cd /<destination_folder>/enterprise-local-license-server/enterprise

9. Change the admin password.

   ./flexnetlsadmin.sh -server http://<server_ip_address>:7070/api/1.0/instances/~ -authorize <defaultAdminName> {<defaultAdminPassword>|-<passwordConsoleInput>} -users -edit admin {<newAdminPassword>!|-<passwordConsoleInput>}

   Default admin credentials are in producer-settings.xml:

   • Username: admin
   • Password: Password!01

   For details, see FNE_LicenseServerAdminGuide.pdf in /enterprise-local-license-server/documentation.
10. Verify status:

    1. Verify the systemd status:

       sudo systemctl -l status flexnetls-pentaho

    2. Verify the FlexNet server status:

       ./flexnetlsadmin.sh -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -status

11. Activate licenses using the activation ID emailed by Hitachi Vantara:

    ./flexnetlsadmin.sh -authorize <admin_name> <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -activate -id <activation_id> -count <number_of_entitlements_to_activate>

    <number_of_entitlements_to_activate> must be an integer. It must be less than or equal to the purchased quantity.

    Note: If the license server cannot reach the back office URL, use Activate offline entitlements.

Verify activated licenses on Linux

Use this command to confirm what you activated:

./flexnetlsadmin.sh -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -licenses -verbose

For instructions on applying a license from your LLS, see Apply a license URL.

Install an LLS on Windows

To use Pentaho software, a user must have a valid license in a CLS or LLS that can be verified by the license manager.

If you cannot access a cloud license service, install an LLS behind your firewall.

The LLS is a command-line tool. It activates acquired licenses and performs administrative tasks.

You can install the LLS on the same server or VM that hosts the Pentaho Server. It requires limited resources.

Install an LLS and activate license on Windows

1. Download the LLS file from the Support Portal.

   1. Sign in with the support credentials from your Pentaho Welcome Packet.
   2. In the Pentaho card, select Download.
   3. In the 11.x list, select Pentaho 11.0 GA Release.
   4. Scroll to the bottom of the release page.
   5. Go to Utilities and Tools/Local License Server.
   6. Download the license server file, enterprise-local-license-server-11.0.0.0-<build_version>.zip.
2. Unzip the file to your install folder. Example: <installation_path>\enterprise-local-license-server-<pentaho_version>-<build_version>.
3. Go to the unzipped folder.
4. Install the license server as a Windows service:

   1. Go to <installation_path>\enterprise-local-license-server\server.
   2. Run:

      flexnetls.bat -install

5. Start the service:

   flexnetls.bat -start

6. Change the admin password:

   1. Go to <installation_path>\enterprise-local-license-server\enterprise.
   2. Run:

      flexnetlsadmin -server http://<server_ip_address>:7070/api/1.0/instances/~ -authorize admin <old_password> -users -edit admin <new_password>

      Default admin credentials are in producer-settings.xml in <installation_path>\enterprise-local-license-server\server:

      • Username: admin
      • Password: Password!01

      For details, see FNE_LicenseServerAdminGuide.pdf in /enterprise-local-license-server/documentation.
7. Verify status:

   1. Verify the license server:

      flexnetls.bat -status

      If the server is running, it reports Service running.
   2. Run services.msc.
   3. Confirm that FlexNet License Server - <admin_name> is started.
8. Activate licenses using the activation ID emailed by Hitachi Vantara:

   1. Go to <installation_path>\enterprise-local-license-server\enterprise.
   2. Run:

      flexnetlsadmin.bat -authorize <admin_name> <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -activate -id <activation_id> -count <number_of_entitlements_to_activate>

Verify activated licenses on Windows

Use these commands:

• Server status:

  flexnetlsadmin.bat -authorize admin <password> -server <licenseServer_baseURL> -status

• Activated licenses:

  flexnetlsadmin.bat -authorize admin <password> -server <licenseServer_baseURL> -licenses -verbose

For instructions on applying a license from your LLS, see Apply a license URL.

Administrative commands and files for license management

You can use CLI commands to perform basic license management operations.

Note: If security is enabled (it is enabled by default), include credentials with each command:

-authorize admin <password>

Default credentials:

• Username: admin
• Password: Password!01

Logs for license management

File	Location	Description
access_request.log	/var/opt/flexnetls/<identityName>/logs	Server endpoint request logs
flexnetls.log	/var/opt/flexnetls/<identityName>/logs	Server logs

Common commands for license management

Command	Description
./flexnetlsadmin.sh -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -status	Check service status
./flexnetlsadmin -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -config	Check server configuration
./flexnetlsadmin.sh -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -licenses -verbose	List activated entitlements
./flexnetlsadmin.sh -authorize admin <password> -server <licenseServer_baseURL> -activate -id <activation_id> -count <count>	Activate entitlements

Other files and commands for license management

File/command	Location	Description
local-configuration.yaml	/opt/flexnetls/pentaho	LLS configuration
producer-settings.xml	/opt/flexnetls/pentaho	Server configuration set up by Hitachi Vantara
sudo systemctl daemon-reload	Not applicable	Run after you update the service configuration
sudo systemctl stop flexnetls	Not applicable	System-wide command
sudo systemctl enable flexnetls	Not applicable	System-wide command
sudo systemctl disable flexnetls	Not applicable	System-wide command
sudo systemctl status flexnetls	Not applicable	System-wide command

Set up a self-signed certificate for an LLS

You can configure self-signed certificate (SSL) for the LLS.

Note: Refer to Components Reference for the supported Java version.

Open port 1443 for communication with the LLS.

1. Go to the Java security folder:

   cd /usr/lib/jvm/<java_installation_folder>/lib/security

   Example: /usr/lib/jvm/java-<version>-openjdk-amd64/lib/security
2. Generate the self-signed certificate:

   sudo keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -storepass changeit -validity 3600 -ext san=ip:<ip_address>,ip:<local_host>

3. Export the certificate:

   sudo keytool -export -alias selfsigned -keystore keystore.jks -rfc -file server_cert.cert

4. Import the certificate:

   sudo keytool -import -trustcacerts -keystore /usr/lib/jvm/java-<version>-openjdk-amd64/lib/security/cacerts -storepass changeit -alias selfsigned -file server_cert.cert

5. Update /opt/flexnetls/pentaho/local-configuration.yaml:

   # HTTPS server mode
   https-in:
     # Set to true to enable
     enabled: false
     # HTTPS listening port
     port: 1443
     # Path to keystore
     keystore-path: <path-to-your-keystore>
     # Keystore password. You can obfuscate this with java -jar flexnetls.jar -password <your-password>
     keystore-password: changeit
   
     # Choice of TLS cipher suites. One of MODERN, COMPATIBLE or WEAK.
     tlsCipherSuites: COMPATIBLE
   
   # HTTPS client mode. You generally don't need to specify this, unless you have an in-house CA chain.
   https-out:
     # Set to true to enable
     enabled: false
     # Path to truststore containing server certificate.
     truststore-path: <path-to-your-truststore>
     # Truststore password. You can obfuscate this with java -jar flexnetls.jar -password <your-password>
     truststore-password: changeit
     # Switch off if you're having host validation problems (not recommended)
     host-verify: true
     # Set to true if you're using self-signed certificates (not recommended)
     self-signed: false

SSL is now configured.

Activate offline entitlements

Use offline activation if a security restriction prevents the license server from reaching the back-office URL.

1. Obtain the activation ID from the sales support team.
2. Create a request file (capabilityRequest.bin) on the license server:

   cd /<destination_folder>/enterprise-local-license-server/enterprise
   
   # Linux:
   ./flexnetlsadmin.sh -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -id <activation_id> -count <number_of_entitlements_to_activate> -o capabilityRequest.bin
   
   # Windows:
   ./flexnetlsadmin.bat -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -id <activation_id> -count <number_of_entitlements_to_activate> -o capabilityRequest.bin

3. Send capabilityRequest.bin to Pentaho customer support.

   Customer support generates capabilityResponse.bin and sends it back.
4. Load capabilityResponse.bin:

   • Linux:

     ./flexnetlsadmin.sh -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -load capabilityResponse.bin

   • Windows:

     ./flexnetlsadmin.bat -server http://<license_server_ip_address>:7070/api/1.0/instances/~ -authorize admin Password!01 -activate -load capabilityResponse.bin

5. Verify activated licenses:

   ./flexnetlsadmin.sh -authorize admin <password> -server http://<server_ip_address>:7070/api/1.0/instances/~ -licenses -verbose

Your entitlements are now activated.

Change the Java temporary directory on Linux

The LLS must be able to access Java's temporary directory.

If access is restricted, create a new temp directory and configure the service to use it.

1. Create a new temp directory:

   sudo mkdir /<temp_directory_name>
   sudo chmod 777 /<temp_directory_name>
   sudo chown root:root /<temp_directory_name>

2. Stop the service:

   sudo systemctl stop flexnetls-pentaho

3. Open the service config file:

   sudo vi /etc/systemd/system/flexnetls-pentaho.service.d/flexnetls.conf

4. Add -Djava.io.tmpdir=<full_path_to_temp_directory> to the end of the JVMOPTS value.

   Example:

   Environment="JVMOPTS=... -Djava.io.tmpdir=/<full_path_to_temp_directory>"
5. Save the file.
6. Verify SELinux is permissive.

   If it is not permissive, see Change SELinux to permissive mode.
7. Reload and restart the service:

   sudo systemctl daemon-reload
   sudo systemctl start flexnetls-pentaho

Uninstall an LLS on Linux

To uninstall the LLS from Linux, complete these steps.

Important: If a device is associated with your machine in FlexNet Operations and you have activated entitlements on that device, you must set the device state to obsolete before reinstalling. Otherwise, activation might fail due to an activation ID mismatch.

1. Stop the service:

   sudo systemctl stop flexnetls-pentaho

2. Disable auto-start:

   sudo systemctl disable flexnetls-pentaho

3. Remove service files:

   sudo rm /etc/systemd/system/flexnetls-pentaho.service
   sudo rm -r /etc/systemd/system/flexnetls-pentaho.service.d

4. Optional clean reinstall cleanup:

   • Trusted storage: rm -rf /var/opt/flexnetls/pentaho
   • Logs: rm -rf /var/opt/flexnetls/pentaho/logs

Uninstall an LLS on Windows

To uninstall the LLS from Windows, complete these steps.

1. Stop the service:

   flexnetls.bat -stop

2. Uninstall the service:

   flexnetls.bat -uninstall

3. Clean up the service entry:

   sc delete FNLS-pentaho

4. Delete the files in the license server installation directory.
5. Optional clean reinstall cleanup:

   • Trusted storage: C:\Windows\ServiceProfiles\NetworkService\flexnetls\pentaho (.ks, .db, and .0)
   • Logs: C:\Windows\ServiceProfiles\NetworkService\flexnetls\pentaho\logs

Note: Trusted storage and log file locations are defined by server.trustedStorageDir and logging.directory. Your server might use different paths.

Apply a license

To use Pentaho software, you must apply a license that specifies the features and CPU core count that you are licensed to use on your physical or virtual machine. For instructions on applying a license, see one of the following sections:

• Apply a license URL

  Apply a license URL if you use Pentaho software with a CLS or LLS.
• Apply a node-locked license

  Apply a node-locked license file to use Pentaho software fully offline on a single, designated physical or virtual machine.

Apply a license URL

Apply a license URL to activate features and CPU core counts if you use Pentaho software with a CLS or LLS.

• Apply a license URL using PUC
• Apply a license URL using the PDI client
• Apply a licenses using the command line interface

Note: You can use a node-locked license to run Pentaho fully offline.

Apply a license URL using PUC

To use Pentaho software, you must install enterprise licenses that can be verified by your organization's license server. You can install licenses using the Pentaho User Console (PUC).

Before installing Pentaho Server licenses using PUC, you must complete the following prerequisites:

• Obtain the URL for requesting a license from the license server. Your organization might use the Pentaho license server or an LLS.
• Download the Pentaho Server to your environment.
• Verify that you have administration privileges.

Complete the following steps to install Pentaho Server licenses by using PUC.

1. Log in to the Pentaho User Console. See the Pentaho Business Analytics document for instructions on logging in to PUC.
2. If you do not have valid licenses, the License page appears the first time you log in.

   
3. Click the plus sign (+) to open the Add License window.
4. Select License Server, enter either the cloud license service URL or the LLS URL, and then click OK.

   The URL for requesting a license from the LLS looks like the following example:

   
5. Review the license summary to see which components you are now entitled to use, and then click Close.

   

Apply a license URL using the PDI client

To use Pentaho products, you must install enterprise licenses that can be verified by your organization's license server. You can install licenses using the PDI client.

Before installing licenses using the PDI client, you must complete the following prerequisites:

• Obtain the URL for requesting a license from the license server. Your organization might use the Pentaho license server or an LLS.
• Download the PDI client to your environment.

Complete the following steps to install your licenses using the PDI client (also called Spoon).

1. Start the PDI client.

   See the Pentaho Data Integration document for more information about the PDI client. If no valid license for the PDI client exists, the Pentaho License Manager dialog box appears.
2. In the Pentaho License Manager, click the plus sign (+) to open the Add License window.
3. Select the License Server option, enter either the cloud license service URL or the LLS URL, and then click OK.

   The URL for requesting a license from the LLS looks like the following example:

   
4. Review the license summary to see which components you are now entitled to use, and then click Close.

   

Apply licenses using the command line interface

You can set the license path environment variable, or you can install, update, list, or remove license files.

Install or update license from the command line

To install or update license, follow the steps below.

1. Navigate to the /license-installer/ directory where the Pentaho PDI tool is installed (the license-installer subfolder).
2. Run the license installation script as follows to see examples of how to use it:

   • Linux:

     install_license.sh --help

   • macOS:

     install_license.sh --help

   • Windows:

     install_license.bat --help

Set the license path environment variable

Pentaho Server maintains a license information file to track your license information. This file is named .elmLicInfo.plt. The default location of the license information file is the .pentaho folder in the Pentaho user account's home directory. If you need to change this location you must create a PENTAHO_LICENSE_INFORMATION_PATH system environment variable for your Pentaho user account and set it to the location where you want the license information file stored. It does not matter what location you choose; however, the location needs to be available to the account(s) that run the Pentaho Server.

Set the license path environment variable on Linux

Perform the following steps to set the environment variable for the license path in Linux.

1. Open the /etc/environment file with any text editor.
2. Add this line in a convenient place (changing the path if necessary):

   export PENTAHO_LICENSE_INFORMATION_PATH=/home/pentaho/.elmLicInfo.plt

3. Log out and log back into the operating system for the change to take effect.
4. Verify that the variable is properly set using the following command.

   env | grep PENTAHO_LICENSE_INFORMATION_PATH

The PENTAHO_LICENSE_INFORMATION_PATH variable is now set.

Set the license path environment variable on Windows

Perform the following steps to set the environment variable for the license path in Windows.

1. Under Windows settings, locate and open the Windows system environment variables file for editing.
2. In the System Variable section, click New.

   A dialog box will ask for a variable name and value.
3. Type PENTAHO_LICENSE_INFORMATION_PATH into the Name field and specify the directory where you intend to store license information in Value.
4. In the parent window, click Apply Changes.
5. Restart your computer for the change to take effect.
6. Verify that the variable is properly set, using the following command at the command prompt:

   echo %PENTAHO_LICENSE_INFORMATION_PATH%

The PENTAHO_LICENSE_INFORMATION_PATH variable is now set.

If you run Tomcat automatically as a Windows service, you must also configure it to run on a Windows account that has access to the location of the .elmLicInfo.plt file. This means that if you have set PENTAHO_LICENSE_INFORMATION_PATH then the account must have access to the location specified by PENTAHO_LICENSE_INFORMATION_PATH .

Apply a node-locked license

To run Pentaho software fully offline, you must apply a node-locked license that ties Pentaho software to a single designated node, which can be a physical or virtual machine.

1

Provide the host ID to Pentaho Support to obtain a license file

1. On the node where you installed Pentaho software, open a command prompt or shell.
2. Navigate to %PENTAHO_HOME%/license-installer.
3. Retrieve the <hostid> for the node by running the command for your operating system:

   • For Windows:

     install-license.bat hostid

   • For Linux or MacOS:

     install-license.sh hostid

   The response displays the following message: Please provide the following hostId to your support/sales team: <hostid>
4. Provide the <hostid> to Pentaho Support.

Pentaho Support uses the <hostid> to generate a license file that is tied to the node and specifies the licensed features and CPU core count. Pentaho Support then provides the license file to you.

2

Place the license file in the default Pentaho directory

On the node where you installed Pentaho software, place the license.bin file that you received from Pentaho Support in the default directory:

• For Windows: %USER_HOME%/.pentaho
• For Linux and MacOS: %USER_HOME%\.pentaho

Note: If you place the license file in a custom location, you must update the startup script with the full path to the license file.

3

Set environment variables in the startup script

1. Open your startup script in a text editor. Pentaho software comes with the following startup scripts:

   For Windows:

   • Pentaho Data Integration (PDI) Client (Spoon, Pan, Kitchen, and Carte): <PENTAHO_INSTALL_DIR>\data-integration\Spoon.bat
   • Pentaho Server: <PENTAHO_INSTALL_DIR>\pentaho-server\start-pentaho.bat

   For Linux and MacOS:

   • PDI Client (Spoon, Pan, Kitchen, and Carte): <PENTAHO_INSTALL_DIR>/data-integration/Spoon.sh
   • Pentaho Server: <PENTAHO_INSTALL_DIR>/pentaho-server/start-pentaho.sh
2. Add the pentaho.license.filetype environment variable and set it to NODE_LOCKED.
3. (Optional) To specify a custom location for the license file, add the pentaho.license.file environment variable and set it to the full path of the license file.

4

Restart and review license entitlements

1. Restart Spoon, Pan, Kitchen, Carte, and the Pentaho Server for the license to take effect.
2. To see which components you are now entitled to use, review the license summary in the Pentaho User Console or the PDI client (Spoon).

You can now operate Pentaho fully offline.