Skip to main content

License Server

Overview​

The License Server manages feature activation for all Omnitouch components. Each component validates its license on startup and periodically during operation.

Setup​

1. Define in Hosts File​

license_server:
  hosts:
    customer-licenseserver:
      ansible_host: 10.10.2.150
      gateway: 10.10.2.1
      host_vm_network: "vmbr2"

all:
  vars:
    customer_legal_name: "Customer Name"
    license_server_api_urls: ["https://10.10.2.150:8443/api"]

Note: license_enforced is HSS-scoped, not a global enforcement toggle. It is only defined for the omnihss role (roles/omnihss/defaults/main.yml, where it defaults to false) and is currently only read by the HLD generator; no other role consumes it. Set it under the omnihss group vars if you need it.

2. Provide License File​

Place license.json (provided by Omnitouch) in hosts/Customer/group_vars/

3. Deploy​

ansible-playbook -i hosts/Customer/host_files/production.yml services/license_server.yml

Real inventory directories are capitalized and prefixed (e.g. hosts/Omnicore_Customer/), and the host file is named after the site (e.g. hosts/Omnicore_Customer/host_files/Production.yml).

You can check the status of all license by browsing to https://license_server .

Removing a License​

To remove a license, use util_playbooks/delete_license.yml.

Network Requirements​

Firewall Configuration​

Client site firewalls must be configured to allow HTTPS (port 443) traffic to the Omnitouch license validation servers:

HostnamePurpose
1.time.omnitouch.com.auLicense validation server 1
2.time.omnitouch.com.auLicense validation server 2
3.time.omnitouch.com.auLicense validation server 3

Required outbound rules:

  • Protocol: HTTPS (TCP/443)
  • Destination: the hostnames above, resolved via DNS
  • Direction: Outbound

Resolve by DNS — do not hardcode IPs. Always allow these hosts by FQDN (or by the addresses your firewall resolves them to dynamically). The underlying IPs can change without notice, so static IP allow-lists are not supported and will eventually break license validation.

DNS Requirements​

The license server requires functional DNS resolution to communicate with the Omnitouch license validation infrastructure.

Required DNS configuration:

  • The license server must have access to public DNS servers
  • Configure DNS to use one of the following:
    • 1.1.1.1 (Cloudflare - supports secure DNS)
    • 8.8.8.8 (Google Public DNS)
  • Do not use internal/corporate DNS servers for the license server

Note: The Omnitouch license servers use secure DNS (DoH/DoT). Using public DNS servers ensures proper DNSSEC validation and prevents issues with DNS interception by security appliances.

Last updated on