- - Community Resources
Ideas
Product Updates
Events
Blog

Home
Forums
FME Flow
Security

Security

Permissions, roles, and administration. Security in data processing.

137 Posts
413 Replies

When you subscribe we will email you when there is a new topic in this category

137 Posts

gjaguilarContributor

Error writing to a hard drive on another server

I am starting with FME Server and can someone help me understand and learnI have a download process that runs on a virtual machine with Windows Server 2019 data center (Server 1) and it must write a file to a disk of another virtual machine that also has Windows Server 2019 data center (Server 2), but I gives permissions error. I understand that the process is executed with a user created in the FME Server, in this case of type System.My doubts are:Should the user created on the FME Server also be created as a user on Server 1 and have write permissions to the Server 2 disk?Should the user be changed in FME Server to Directory Server type or is it not necessary?

474

8 months ago

mariasContributor

asked in Security

Can't create FME Flow backup

I am trying to create FME Flow backup in order to upgrade it to the newer version.Current version is FME Server 2020.2. I am getting the following error:Tried many times and cleaned drives a bit. Previous backup was about 100 Mb. So it should be more than enough space for the new backup: What can be wrong, how I can fix this? Thank you in advance.

653

8 months ago

brian_sParticipant

asked in Security

Workspace Parameter Validation Error

I am trying to add a user to a Workspace in FME Flow 2023.1. I get a message ‘Parameter Validation Error’ when I click OK.

430

9 months ago

megrandfilsObserver

asked in Security

No emails or response from FME

Hi I am not sure what to do at this stage and was wondering if anyone had any insight. I tried to enrol to do an online course and created an account using my work email. I have not received any emails to verify the account and I have tried to have a verification and password reset email sent with no luck either. I have sent an email to info@FME with no response as well. I tried to recover my old password from a FME account using my home email address as well with no response. Email addresses are correct, and I have check SPAM folders. Any suggestions on who to contact at this stage? Regards Mark

732

9 months ago

aaronContributor

asked in Security

Users and Roles - How to give access to all items in a category by default

I have an FME role where I want all users assigned to it to be able to access all of the items in Repositories and Schedules by default. At this time (FME Flow 2023.2), it appears I have to add any newly published workspace or schedule to the role for users in that role to see it. Yes, I can “Select All” but our respositories and schedules are dynamic and it would be nice to “set it and forget it” rather than have to manually intervene on a regular basis. Is it possible? Hoping I am missing something.

410

9 months ago

vxn43Supporter

asked in Security

Add AD User Name into FME Flow

I am using FME Flow 2021. Is there a way to add Active Directory User Names and credentials into FME Flow? Sort of like SSL/SSO with ArcGIS Enterprise. My goal would be to be able to use the same user credentials I use on our network for logging into FME Flow. Currently, my FME Flow has a domain user name, but the user names in FME Flow are built in.

931

9 months ago

dbryantgeoContributor

asked in Security

FME Flow Web Connection requiring constant reauthentication

We have successfully created a Web Connection for Microsoft SharePoint Online and had it authorise on FME Flow and workflows use a FeatureWriter to update list items in SharePoint.However, periodically (we suspect each day) an administrator will need to RDP to the server that hosts FME Flow, access the Web Application and Authorise the Web Connection otherwise workbenches error with the following message.2024-2-12 09:46:10 | Microsoft SharePoint List Writer: Client-side error: '401 Client Error: Unauthorized for url: URL' returned from SharePoint. Error message was: '' I have a suspicion that this is because as our FME Flow is hosted on-premise and is not configured for HTTPS. However, as the web connection maintains authorisation for a period of time I’m not 100% convinced.Has anybody experienced this behaviour in the past? How was it solved?We do have a ticket open with our infrastructure team to configure FME Flow for HTTPS and if this is the prime suspect then we can use this to pu

1522

10 months ago

kirkenContributor

asked in Security

Get database connections and parameters from FME REST API

Hi!I would like to get all database connections and additional information (e.g host, service name, username etc ) from FME REST API. I know that I can get all database connections with this request:https://FMEServerName/fmerest/v3/security/categories/NamedConnections/resources?limit=-1&offset=-1 it gives owner, display name, permissions, name, but not connection parametes. Is it somehow possible to get connection parameters as well? Thanks!

1041

10 months ago

hermannContributor

asked in Security

Antivirus regards fme form 2023 as malware

While trying to download this file https://downloads.safe.com/fme/2023/win64/fme-form-2023.2.2-b23781-win-x64.exe trend apex one antivirus regards it as malware.

632

10 months ago

dewrightcoContributor

asked in Security

With Upgrade to Flow 2023.0.0.3 , Single-Sign-On now fails

I upgraded my Development machine Thursday, and install ran smooth, import of backup ran smooth. Checked settings and all appear to match up with Staging and Production, but unable to get Single-Sign-On to function again. Negotiation reported an error: "Failure unspecified at GSS-API level (Mechanism level: Encryption type RC4 with HMAC is not supported/enabled)". All three of my systems use the same Service-Account, and Staging and Prod have not issue, and Dev worked fine until the upgrade.

2520

10 months ago

annette2Contributor

asked in Security

FME Server - deleted an fmeadmin user and now schedules are not triggering

Hi all,What is the correct process to delete admins from FME Server. I deleted 3 fmeadmin users, testing before that any schedules or automations would be assigned to another user etc. Today many of our schedules who are owned by a completely different user are not working. They also don't work if I do a manual trigger. Recreating the schedule does work. Re-adding the user doesn't. I see in the Completed jobs that the schedules that ran before I deleted user have a reference to a Deleted user. I think the only way to fix this is to manually try to trigger each of our 25 job and recreate the schedule on acceptance and production. Any other ideas would be appreciated. And it would be interesting to know what is the correct procedure? Did I miss something? We are using Server 2021 but this server has been upgraded with an old backup since approx 2015 version.

I have a workbench that reads/writes CSV files to a network location. It works fine from my desktop but when published to FME Flow i get permission errors reading and writing. What user is FME Flow using to read/write to the network? any other worka

Connection Security in System Email Settings is set to "None ". But when FMEFlow "Email results" it uses "SSL/TLS". email.log INFORM main 801026 : Connection Security : SSL/TLS ERROR main 801031 : Invalid SMTP server.

Is this a bug in FME Flow 2023.1 Build 23619 - win64?

I want to encrypt generated output shapefile via PGP encryption in FME. How we can achieve this?

Updating certificates

We (APA) are facing issues with security certificate installed on our FME Server.The certificate has expired and we are not able to update it with new valid cert. We have followed the workflow mentioned here: https://community.safe.com/s/article/Configuring-FME-Server-for-HTTPS-Updating-an-expired-CertificateWe completed all these steps but still not successful.when we connect we still see old expired cert on browser.

How do I determine who is logged into FME Server 2022.2.5

I have an FME Server (Flow) 2022.2.5 installation on a Windows server and I have application-level user security enabled (not Windows-level security). Sometimes I need to do maintenance on the server and I'd like to be able to see who is currently logged in via the web interface. I've looked everywhere in the web interface for something like this but no luck. Thanks.

Are FME Desktop 2017 and 2020 vulnerable for Apache ActiveMQ CVE-2023-46604? Thank you

HTTP to HTTPS untrusted

I have a private AWS server. I have a customer who uses power app to create rest api calls to fme server installed on this server. They need the server to be at a security level of https. They access fme server using the URL of the server through a gateway with an enabled port. Aws has its own security certificate but it charges a lot of money for a private CA. There are free websites out there but they want the domain registered. I can't register the domain of the AWS as it's a private server I went through the safe http to https tutorial using a self signed cert (pfx) section. However, while I managed to get the fme server to use https an untrusted error comes up, even if I add the cert to trusted certificates. I suspect it's because it is a self signed cert. I've had to roll back fme server to http as the users couldn't access the rest API anymore. This is my first dabble with security certificates but I can't see a solution around this. thanks for any adv

Is FME Server / Flow vulnerable for Apache ActiveMQ CVE-2023-46604 https://www.cve.org/CVERecord?id=CVE-2023-46604

SAML Authentication does not work with Okta

Hi!We have configured FME Flow (2022.2.8) for OKTA SAML Authentication as per https://community.safe.com/s/article/Configuring-FME-Server-for-OKTA-SAML-Authentication On signing in with a username, password and MFA it redirects us back to the password page.The restV4.log or fmesaml.log never shows that we attempted to login. We tried to configure FME Flow for Azure AD SAML Authentication, but got the same outcome. Any ideas, please? Regards,Dmitry

520

1 year ago

kirkenContributor

asked in Security

FME Server SSO failed login due to insufficient credentials

Hi!After FME Flow upgrade from 2022.2.1. to 2023.1 our organization is not able to use login with Windows credentials (Active Directory) anymore. It seems to be similar issue to Known Issue: FME Server SSO failed login due to insufficient credentials (safe.com), the error message is Failed login by user YIIJygYGKwYBBQUCoIIJvjCCCbqgMDAu... due to insufficient credentials. We haven't changed the configuration and until now the upgrades to a newer version haven't broken login with Active Directory user.

1880

1 year ago

mferwerda3Contributor

asked in Security

Rest API - fmerest/v3/schedules

I want to automate a rest call to the FME FLOW API for schedule information, like https://myfmeserver/fmerest/v3/schedules?includeAutomations=true&limit=1000&offset=0 What are the minimum FME permissions needed to be assigned to role or system user to be able to run that API call ?

250

1 year ago

ewb_fmeContributor

asked in Security

How to store username and password securely that can be used for getting a token

At the moment I get a token with a normal HTTPCaller with username and password as User parameters. However, I would like to store username and password secure. For this reason I tried to use a Web Connection. Unfortunately this didn't work. Any recommendation hwo this should be done? This is my HTTPCaller that works fine but with the drawback that username and password are defined as user parameters in plaintext.

How to enable anonymous access to FME Flow (2023) services? Guest account is enabled and given permissions on repository and services OK. Trying to call a service always prompts for credentials. Can login as Guest and it works so permissions are OK

saving Email parameters on FME flow

For an automation running on FME Flow is there a method save the parameters used to send an email? Currently we have many email services set up and are switching email servers around. It would be nice to be able to update the credentials for one source opposed to having to edit the parameters in each automation individually.

400

1 year ago

Page 2 / 6

Badge winners

gazmanhas earned the badge Welcome Back
miguelhacarhas earned the badge Spanish Speaker
miguelhacarhas earned the badge Student (Grey)
miguelhacarhas earned the badge Expert (Grey)
miguelhacarhas earned the badge Teacher (Grey)

Show all badges

30,351: Posts

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

An FME Account is required to contribute

Login to the community

An FME Account is required to contribute

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

A product of

Company Products Giving Back Careers Contact Privacy Feedback

Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.