Bentley Communities
Bentley Communities
  • Site
  • User
  • Site
  • Search
  • User
Licensing, Cloud and Web Services
  • Welcome to Bentley Communities
  • Bentley's Communities
  • Licensing, Cloud and Web Services
  • Cancel
Licensing, Cloud and Web Services
Licensing, Cloud and Web Services Wiki Security [FAQ]
    • Sign In
    • Eastern Europe Continuity Plan
    • Guest Accounts - Review Access
    • +Web Services
    • +SES Activation
    • +CONNECTION Client
    • +CONNECT Advisor
    • +Federated Identity
    • -SELECTserver based Activation
      • Understanding the (Legacy) SELECTserver Workflow
      • +Deployed SELECTserver Application Usage TechNotes and FAQs
      • Activating Against SELECTserver OnLine (a Bentley hosted server)[TN]
      • Activating Applications Using SELECTserver Based Licensing as a non-SELECT User
      • Activating Non-Licensed Trial Mode Software
      • Activation of Client Side Products and Registry Basics
      • Client Check In and Out Instructions for XM and Higher [TN]
      • Importing a Checked Out License (XML file) for XM and Higher [TN]
      • Disconnected Mode [FAQ]
      • Generating a License Debug Log
      • +License Management Tool
      • Product Activation [FAQ]
      • Product Activation Modes of Behavior
      • Renewal Process for All Licensing
      • Server does not support this Activation Key
      • Troubleshooting Product Activation for XM and Higher
      • -SELECTserver TechNotes and FAQs
        • "An Error Has Occurred" when manually transmitting usage logs using a preconfigured URL
        • About SELECTserver
        • Connecting to the Bentley servers through Firewalls and Proxy Servers [FAQ]
        • Could not load type 'System.ServiceModel.Activation.HttpModule' from assembly 'System.ServiceModel...'
        • Data Update Service Warning [TN]
        • Database Maintenance
        • Database Setup Tool Configuration and Explanation [FAQ]
        • Deployed SELECTserver Database and Internet Connectivity Insight [TN]
        • Deployed SELECTserver issue with new Bentley SSL certificate
        • Deployed SELECTserver Knowledge Requirements [TN]
        • Deployed SELECTserver Technical Requirements [TN]
        • Enabling Diagnostic Logging for SELECTserver
        • Error 1068: Cannot start the Bentley SELECTserver service
        • Error 417 : in SELECTserver and GateWay logs
        • Glossary Of Licensing Terms [FAQ]
        • Group Policy Administration (ADM) files
        • How do I keep usage reports current?
        • How do I set up or prevent license checkouts?
        • How to create a new website in IIS7
        • How to create a Virtual Directory in IIS7
        • How To Install a Gateways on Vista and Windows 7, Server 2008
        • How to Install the SELECTserver application
        • HTTP Error 404.13 "The request filtering module is configured to deny a request that exceeds the request content length" when importing response file
        • HTTP Error 500.21 - Internal Server Error on SELECTserver Administrative Site
        • Import xml File on Deployed Server
        • IP Address Hosted Server
        • License and SELECTserver Administration [FAQ]
        • +License Manager
        • License Tool Command Line Options
        • Manual Installation of SQL Express (2008 - 2012)
        • Moving (relocating) the SELECTserver application to a new server.
        • Moving Your SELECTserver Database
        • +Older SELECTserver Versions
        • Opening Administration Site
        • Restricting access to a deployed SELECTserver Administration Site. Configuration example (video).
        • Running the Data Update Service and restarting IIS in order to immediately update a deployed license
        • Security [FAQ]
        • SELECT Server 08 11 Series [CS]
        • +SELECTserver
        • SELECTserver 9 Known Issues
        • SELECTserver 9.xx.xx.xx Gateway Update Process [FAQ]
        • SELECTserver 9.xx.xx.xx Upgrade Information [FAQ]
        • SELECTserver Database Backup [TN]
        • +SELECTserver Gateway
        • SELECTserver Gateway error 1053
        • SELECTserver Gateway error 1067
        • SELECTserver Gateway Explained
        • SELECTserver Gateway License Server Revoked License [TN]
        • SELECTserver Gateway Service Fails To Connect through Proxy Server [TN]
        • SELECTserver General [FAQ]
        • SELECTserver in a IPV6 Environment
        • SELECTserver Notifications
        • SELECTserver Online Technical Requirements [FAQ]
        • SelectServer V9 without connectivity and Bentley Passport
        • SELECTserver XM Database Backup [TN]
        • SQL Server 2005 Cachestore Flush Error
        • SQL Server Compatibility Mode - Internal Query Processor Error
        • The response file corresponding to the following logs is not processed.
        • The SQL transaction logs are full
        • Transmit Usage Logs - 0 Logs Found To Process [TN]
        • Trust Licensing Basics [FAQ]
        • Unlock the SQL Server SA Account
        • Usage Log Processing - ERROR with status code 15014
        • Using Active Directory Group Policy Objects to Configure Licensing for Users Centrally (video).
        • What options are available to allow the external (WAN) user to access a Locally Deployed SELECTserver?
        • What's New in the latest SELECTserver?
      • Where do I find my Activation Key?
      • Prevent unauthorized SELECTserver Activation Key based Usage
      • Stopping SELECTserver Activation Key based Usage
    • +Pre-SELECTserver Based Activation
    • +Product-Specific Licensing
    • Understanding why you received a TL Invoice
    • Working from Home using Bentley Licensing
    • +Licensing Workflow
    • How to leave a Product Review
    • +Serviços ProjectWise 365
    • About Bentley Trust Licensing
    • Customer Number, Account Number, Entitlements, Users
    • How to delete Bentley account and all related data
    • Support for non-Bentley technologies utilized by Bentley products
    • Support for V8i applications after December 31st, 2021
    • +Support Homepage - Localized
    • What you need to know/request when consolidating Accounts

    Security [FAQ]

      Product(s): SELECTserver
      Version(s): N\A
      Environment: N\A
      Area: Installation / Configuration
      Subarea: Security

    Are there any differences between the reports generated by a deployed SELECTserver and those transmitted to Bentley?

    The reports are essentially the same, although no proprietary account information is transmitted from the account to Bentley's Web Services. Instead, machine or user names generally viewable from an account's administrative pages are replaced by hashed values using a multi-pass, one-way encryption (SHA1) technique. This one-way hash provides a means for Bentley to uniquely identify a machine or a user. An encrypted machine or user name cannot be reverse engineered to produce its original name.

    Does SELECTserver perform any encryption on network transmissions or data?

    SELECTserver obscures machine and user names in the processing of transmitted reports to Bentley, but does no other encryption on any other data. SELECTserver relies on Microsoft IIS and SSL to encrypt network transmissions. All network communications are standard network protocols and, as such, can be routed through any standard network security mechanism.

    What information is transmitted by a client to SELECTserver?

    The following attributes are communicated by client machines to Bentley's hosted SELECTserver (i.e. selectserver.bentley.com) or to a deployed SELECTserver:

    • Product ID
    • Product version number
    • Windows machine name
    • Windows account user name
    • Activation key
    • Date and time application/feature was started
    • Date and time application/feature was shut down
    • Operating system version
    • Bentley license client version
    • Bentley login identifier (not actual email address and only if signed into CONNECTION Client)
    • CONNECTED Project identifiers (not actual CONNECTED Project name and only if document has been assigned to a CONNECTED Project)

    What information is transmitted by a deployed SELECTserver to Bentley?

    There is no proprietary or personal information in usage data transmitted to Bentley. SELECTserver supports the Secure Socket Layer (SSL), so all transmissions are configurable to be secure.

    SELECTserver-to-Bentley.com Communications
    License Request for a Deployed SELECTserver

    • SELECTserver activation key
    • SELECTserver serial number
    • Windows Machine Name (of the SELECTserver only)

    Usage Data reported from Deployed SELECTserver

    • SELECTserver version number
    • SELECTserver serial number
    • SELECT Site ID
    • Product (application/feature) ID
    • Product (application/feature) version
    • Max usages statistics
    • SHA1-Hashed Machine Name
    • SHA1-Hashed User Name

    Note: The machine and user names are hashed to provide only unique identifiers for both to Bentley.

    What network protocols will be used, and what ports will need to be open?

    SELECTserver uses HTTP and HTTPS.

    The Bentley applications do not determine the internet communication ports. By default the ports are 80 ( normal internet traffic) and 443 (Secure Socket Layer “SSL). These ports can be different but if they are please check with your IT department. That would be an internal configuration and it is not controlled by the SELECTServer application.

    The information below defines the specific Bentley communication sites. At worst case the IT team will be able to make exceptions for the Bentley site or just TRUST *.bentley.com

    Connecting to the Bentley servers through Firewalls and Proxy Servers

    http://communities.bentley.com/products/licensing/w/licensing__wiki/6857.aspx  

    What Bentley (DNS) domains does my deployed (i.e. in-house) SELECTserver need to have access to?

    buddi.bentley.com
    ssla.bentley.com
    appsnet.bentley.com
    (for SELECTserver 08.11.xx.xxx or earlier)
    selectserver.bentley.com (for SELECTserver Gateway only)

    What Bentley (DNS) domains must be accessible to access Bentley's hosted SELECTserver (i.e. SELECTserver Online)?

    selectserver.bentley.com
    ims.bentley.com

    What is the IP address for SELECTserver Online?

    Previously, SELECTserver supported a static IP address.  That is no longer possible, so it is recommended to avoid defining firewall rules based on IP Address.

    What port does the SELECTserver Gateway use for communication with clients?

    The SELECTserver Gateway still uses a proprietary protocol on port 3998 to communicate with pre-XM applications.

    In all cases Bentley applications will initiate the communications with the SELECTserver. Data flows from the client machine to SELECTserver; from SELECTserver it is summarized and usage logs are transmitted via secure web services to Bentley.

    Who has access to the administrative pages for my company's Sites on SELECTserver Online?

    Only those SELECT Online subscribers who have "License Administration Rights", as defined by Bentley's CRM system, have access to the administration pages of their site(s) on SELECTserver OnLine.

    Does Bentley remotely access SELECTservers at a user's site?

    No, all communication between a deployed SELECTserver and Bentley's Web Services are controlled by the account.

    Can I obtain a fail-over license to prevent against catastrophe?

    There will be no need to replace redundant licenses that have been issued for the purposes of fail-over or redundancy. SELECTserver is built on standard Microsoft technologies that are well-suited for clustering or other techniques used to safeguard application servers. In addition, because of the implementation of TRUST licensing SELECTserver is no longer a real-time license server, so if a connection is lost, licensed applications are still able to run in full-functioning "disconnected" mode for up to 30 days until service is restored.

    I can't connect my SELECTserver to the Internet! How do I manually transmit my usage logs to and update my license from Bentley?

    SELECTserver includes alternate, manual procedures for transmitting usage reports to Bentley and downloading license updates. You must set SELECTserver to transmit application usage logs manually on the Server Settings administrative page. Logs need to be prepared and sent to Bentley monthly in order to keep SELECTserver activated. A number of alternatives exist for transmitting the reports, including:

    * Upload the file(s) via the web
    * Email the file(s)
    * Mail the files on CD to Bentley

    An Acknowledgment File will need to be processed each time a report is transmitted in order to reset SELECTserver.

    See Also

    Bentley Cloud Services Portal and CONNECTION Client FAQ

    Other Language Sources

    Deutsch

      Original Author: Bentley Technical Support Group
    • Security
    • Installation / Configuration
    • Bentley Cloud Services
    • SELECTserver
    • SELECTsupport
    • Share
    • History
    • More
    • Cancel
    • Elisa McGraw Created by Elisa McGraw
    • When: Thu, Sep 18 2008 6:01 PM
    • DanielB Last revision by Bentley Colleague DanielB
    • When: Tue, Jun 8 2021 8:30 AM
    • Revisions: 35
    • Comments: 0
    Recommended
    Related
    Communities
    • Home
    • Getting Started
    • Community Central
    • Products
    • Support
    • Secure File Upload
    • Feedback
    Support and Services
    • Home
    • Product Support
    • Downloads
    • Subscription Services Portal
    Training and Learning
    • Home
    • About Bentley Institute
    • My Learning History
    • Reference Books
    Social Media
    •    LinkedIn
    •    Facebook
    •    Twitter
    •    YouTube
    •    RSS Feed
    •    Email

    © 2023 Bentley Systems, Incorporated  |  Contact Us  |  Privacy |  Terms of Use  |  Cookies